2-Factor Authentication is SCREWING EVERYTHING UP

[sbroco]

The new 2-Factor Authentication is absolutely SCREWING UP OUR BUSINESS!!!! That fact that you are forcing upon EVERY login to set it up, is F&%KING everything up. I got calls from my business 10-15 times over the weekend cause the 2-factor kept losing my registers out. I was completely down MULTIPLE times. And you keep asking/demanding/forcing to set it up each login and one of my employees will do it on accident and SCREEEEEEWS Everything up!!!! Why would it immediately log out registers that have been logged in for months. UNBELIEVABLE!!!! STOP FORCING US TO ADD 2FA EVERYTIME WE LOG IN!!!!

[ryanwanner]

hello @sbroco !

Yes, the TFA can be a right pain in the arse, but in the grand scheme of things I'd rather have to take that second step to verify that my data and finances are secure.

You are completely right that the apps shouldn't be logging out: my systems haven't forced a login any time recently.

Please check to make sure that you are running the latest and greatest versions of both the app and your Operating System. Square has done a lot of back end work recently that can and will cause random issues to appear--a lot of work around the logins to be more precise. Making sure everything is always on the latest version should solve that problem.

Next, once everything is updated, the only reason why the app would call for TFA is if it is logged out of your account. Hopefully that isn't what's happening! There is no reason to log out of your account during the day. If you have to switch business locations under the same account, you can now do that directly from within the app. There is a change location link right above the sign out link on the settings page.

Also, if the system does need the TFA login, make sure your employees are checking the "Remember this device for 30 days" check box.

If you're still seeing the random logout issue I'd definitely recommend calling support. They can dig into your login issues further than we can in a public forum.

Hope this helps!

[sbroco]

That is all well and good. But then now I have to do this to all my devices Every 30 days????? Are you kidding me??? Lets say I have 10 locations, with 3 devices at each. You are telling me I am going to have to walk to every device and 10 separate locations and get 30 separate text messages to log in each device EVERY MONTH????

[ryanwanner]

@sbrocoYou can absolutely disable TFA from the dashboard if you desire, but I recommend against it.

To clarify, the 30 days is how long the system will remember your TFA credentials, not that it will automatically sign you out after that time. It just means that if you happen to sign out of a device after the 30 days you'll have to use the TFA to get access again. I have one device that's been signed in for over 60 days with no issue. I know that if it were to get signed out, it will require a TFA to get back in, but it works perfectly fine right now.

Also, for your theoretical, I'd assume you have a trusted manager in each of those locations. You can add phone numbers to the TFA list on the dashboard. That way if/when the system logs you out, the manager can use their own phone number to get the code. It shouldn't affect you at all.

[MimiW]

Hi @sbroco, I acknowledge your frustration with this experience. It's not feedback we've encountered from others yet, so I would love to chat with you 1:1 about your situation and how we can help in the future. Please send me a private message at your convenience.

I echo what @ryanwanner said, while 2FA does add friction to the login experience, we highly encourage sellers to enroll in 2FA to protect your account balances from fraudsters. It's 100% effective against automated attacks and 96% effective against bulk phishing attacks (for more info, see Google Security Blog).