Getting started

1. Switch on Two-Factor Authentication in Settings → Modules and click Configure.
2. Under Enforcement per role, choose for Admin, Vendor (marketplaces only) and Customer:
   • Off — never asked.
   • Optional — people can turn it on themselves.
   • Required — everyone in that group must set it up at their next sign-in.
3. Leave Allowed methods on TOTP (authenticator app).
4. Save.
5. Set up your own 2FA first (see Admin enrollment), so you know how it works before requiring it of your staff.

Recommended for most stores: Admin Required, Vendor Required on marketplaces, Customer Optional or Off. Requiring it for customers adds friction at checkout sign-in.