Keep your account secure: two-factor, devices and login
Turn on two-factor authentication, save recovery codes, review signed-in devices, and change your login email.
Ordina has no passwords to steal: you sign in with a code sent to your email. Two-factor authentication adds a second check for anyone who gets hold of that inbox.
Two-step sign-in
Under Profile → Privacy & security:
- Tap Turn on two-step sign-in.
- Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password, Microsoft Authenticator), or enter the key by hand.
- Enter the 6-digit code from the app and tap Turn on.
From then on, signing in asks for the email code and the app code.
Recovery codes
Tap Generate recovery codes and save them somewhere safe (a password manager, or printed). Each code works once and gets you in if you lose your phone. Generating a new set replaces the previous one.
Signed-in devices
The same page lists the browsers and phones where your account has been used, most recent first, with when each was last active. Sign out any device you do not recognise, or use Sign out all other devices. A page already open on a signed-out device can keep working for up to an hour, then it asks to sign in again. Signing out everywhere is the first thing to do if you think someone else has your email access.
Changing your login email
Profile → Personal details → Sign-in email. Enter the new address and tap Send confirmation. A confirmation link goes to your current address and to the new one, and your login changes only after both are confirmed. Your business email (shown to customers) is separate and lives under Store → Profile.
Good habits
- Use an email account that itself has two-factor turned on.
- Do not share your login code with anyone; Ordina staff never ask for it.
- On the Business plan, give staff their own logins under Team instead of sharing yours.