# Account security
Two-step authentication (also known as two-factor authentication) provides a more secure login process. Two-step authentication provides extra security in case anyone other than you attempts to log in to your MoneyCollect account. Whenever you log in, you need to complete two separate steps:
1. Enter your account credentials, which are your email address and your password.
2. Authenticate your attempt to log in using a verification code generated by **your authenticator app** or **received via SMS**.
{% hint style="info" %}
Using an authenticator app for two-step authentication is recommended.
{% endhint %}
### Using SMS text messages
#### Activate SMS authentication in MoneyCollect
You can set up your mobile device to receive a one-time 6-digit code that is sent in a SMS text message to your mobile device when you log in to your account. You'll need to manually enter this code in addition to usual password.
1\. Login your MoneyCollect Dashboard.
2\. Navigate to`Profile` page.
3\. In the`Two-step authentication`section, click`Enable`.
4\. Select`Use SMS text messages`.
5\. Select`country/region`, and then enter your phone number.
6\. Click`Confirm` .
7\. Check your mobile phone for an SMS text message.
8\. Enter the one-time 6-digit code, and then click `Verify`.
9\. Store your backup code in a safe location offline that you can access in multiple ways in case you lose access to your mobile device.
Now when you try to log in, require a 6-digit verification code sent to your mobile device for two-step authentication.
#### Update your phone number to receive SMS text messages
1. Click`update` button that is next to the authentication method: SMS.
2. Select`country/region`, and then enter your **new** phone number.
3. Click`Confirm your phone number`.
4. Enter the one-time 6-digit code from your new phone number, and then click`Verify`.
5. Update successfully.
### Using an authenticator app
**`Recommended`**
#### Before you begin
To enable two-step authentication with an authenticator app, you need to install an authenticator app on your mobile device.(Now we only support Google authenticator app)
When you install an authenticator app, make sure that you follow its instructions carefully. MoneyCollect support can't help you to install these third-party apps on your mobile devices. After your app is downloaded and set up, you can activate the feature in MoneyCollect.
#### Activate an authenticator app in MoneyCollect
1. Login your MoneyCollect Dashboard.
2. Navigate to`Profile`page.
3. In the`Two-step authentication`section, click`Enable`.
4. Select`Use an authenticator app`.
5. Use the authenticator app you downloaded to scan the QR code shown in the popup to set up your account.
6\. Click`Continue`.
7\. Enter the 6-digit verification code that is generated by your authenticator app, and then click `Verify`.
Store your backup code in a safe location offline that you can access in multiple ways in case you lose access to your mobile device.
Now when you try to log in, require a 6-digit verification code generated by your authenticator app for two-step authentication.
#### Update your authenticator app
1. Click`update` button that is next to the authentication method: Google authenticator app.
2. Use the **new** authenticator app you downloaded to scan the QR code shown in the popup.
3. Click`Continue`.
4. Enter the 6-digit verification code that is generated by your **new** authenticator app, and then click`Verify`.
5. Update successfully.
### Backup code
When you set up a two-step authentication method, you will generate a backup code automatically and please store it in a safe place.
Backup code enable you to access your MoneyCollect dashboard if any other authentication method is not available. For example, if you lose your mobile device or don't have access to your mobile device, then you can use your backup code to log in to your account if it has two-step authentication enabled.
You need to copy or download the backup code when you generate it and make sure that you store the backup code in a safe place.
{% hint style="info" %}
The backup code is one-time. If you use your backup code to login, your two-step authentication will be disabled automatically. Remember to activate two-step authentication one more time to secure your account after you login with the backup code.
{% endhint %}
If you didn't save your backup code when you set up your authentication method, you can generate a new backup code.
1. Login your MoneyCollect Dashboard and navigate to`Profile` page.
2. One of your two-step authentication methods is enabled.
3. Click`Generate a new backup code.`
4\. Enter your password of MoneyCollect dashboard and click `Generate code`.
5\. Do any of the following to store your backup code in a safe place:
* To copy and paste the backup code into a document, click`Copy`button**.**
* To download the backup code in a txt file on your device, click`Download`button**.**
### Login with two-step authentication
After you set up two-step authentication, to log in to your MoneyCollect, you must use the authentication method in addition to your email and password.
Steps：
1\. From your MoneyCollect`Signin`page, enter your email address and your password.Then click`Sign in`.
2\. If you set up both Google authenticator app and SMS for two step authentication, we give you priority to log in with google authenticator app. But you can click`Sign in another way`to login with SMS authentication.
3\. Authenticate using the method that you set up to perform two-step authentication.
* If you use an authenticator app, enter the 6-digit code from the app on your mobile device into the login page.
* If you use SMS authentication, enter the 6-digit code you received via SMS text messages into the login page.
* If you use lose access to your mobile device, use the backup code to login.
4\. Click`Sign in`.
### Deactivating two-step authentication
{% hint style="warning" %}
If you decide to deactivate all methods of two-step authentication, then when you log in to your account, you are only prompted to enter your email address and your password. As a result, your account will be less secure.
{% endhint %}
Steps：
1. Login your MoneyCollect Dashboard and navigate to`Profile` page.
2. In the`Two-step authentication` section, click`delete`button that is next to the authentication method that you want to deactivate.
YF~Q%60HV.png?alt=media\&token=211c6405-e8d2-4da4-8ce3-f8ec3f5bae00)
3\. Enter the password of your MoneyCollect dashboard and click `Disable`.
4\. Deactivate successfully.
### Team security
If you are the administrator or the owner of a MoneyCollect merchant, you can require all team members to use two-step authentication by visiting `Settings` -> `Team management`.
