PSA: forced password change

[getright]

so this is a heads up cause i learnt the hard way today and lost business cause of it

i was forced to do a password refresh when going on the website for what reason i dont know

be aware that when you do this it will force a log out on all POS devices at all venues, so if you have an authenticator (as i do ) and you were forced to do this during business hours (which i was) this will totally screw you. i had to run around and authenticate every log in

there is no warning about forcing a new log in to all POS or suggesting that out of business hours is the best time to do it.

great start to the morning

[rtfulk]

@getright Welcome to the community!! Have you considered using device codes instead of the main owner email/password, they’re generally treated more like dedicated terminals tied to the location rather than active account login sessions.

So when a password reset or forced credential refresh happens:

• Devices using the owner login often get kicked out
• Devices using device codes usually stay connected unless Square specifically invalidates device sessions too

Nothing is 100% guaranteed with security/account changes, but using device codes is definitely considered the better setup for multi-register or multi-location businesses to avoid exactly these kinds of headaches.

To create device codes:

1. log into your dashboard, click Settings/Device Management/Points of Sale.

2. Click Add Device.

3. Choose the location and a nickname for the device.

4. Square will generate a 12 digit deice code.

5. Open the Square POS app, log out.

6. On the sign in screen tap Use a Device Code and enter the code.

Your device will stay logged in, until you decide to log it out.