Skip to main content

Account and security · 5 min read

How do you protect your account with a password and two-step verification?

On the Account security page you change your password, turn on two-step verification and manage your recovery codes.

← All guides

Before you start

  • Reach the Account security page from the Security card on Settings with the Manage account security button (Account security).
  • Two-step verification (TOTP) needs an authenticator app such as Google Authenticator, 1Password or Authy. It is required for every Crossell account: if you have not set it up yet, your next sign-in sends you to the Account security page and the other pages stay closed until you finish.
  • If you sign in with Google you have no Crossell password; the page says so and asks you to protect your Google account with 2-Step Verification.

Steps

Changing your password

  1. On the Password card fill in Current password, New password and Confirm new password.
  2. The new password needs at least 12 characters with uppercase, lowercase, a number and a special character.
  3. Press Change password. You see "Password changed."
  4. Passwords must be changed every 365 days. If you sign in with an expired password, every page sends you here until you set a new one.

Turning on two-step verification

  1. On the Two-step verification card press Set up authenticator app.
  2. Scan the QR code with your app, or enter the key shown by hand.
  3. Type the 6-digit code from the app and press Turn on.
  4. On Save your recovery codes, store the codes in a password manager and press I saved them. Each code works once and is shown only now.

Once on, the card shows "On", the date it was turned on and how many recovery codes are left. Signing in with Google also asks for this code.

When you sign in

  1. Finish your password or Google sign-in.
  2. On Enter your authentication code, type the 6-digit code from the app or a recovery code and press Continue.
  3. After 5 wrong attempts you have to wait 15 minutes.

Renewing recovery codes

  • Type a current code and press New recovery codes to get new codes.
  • Two-step verification cannot be turned off on any account; the page says so and shows no turn-off button. When you change phones, install the app on the new phone first, then sign in with a recovery code and create new codes.

What you should see

Until the code is verified, account actions (password, account deletion) stay closed; only sign-in and sign-out are open.

Troubleshooting

  • If you lost your phone, use a recovery code on the sign-in screen, then create new codes.
  • If it says the code was not accepted, try the newest code in the app and check that your phone's clock is correct.
  • If you cannot solve it, follow the support steps in the Troubleshooting guide.

Related guides

How do you invite your team and choose what each person sees?On the Team page you invite employees by e-mail, choose which features and which amounts each one sees, and suspend or remove them when needed.6 min readWhat do you do when data is old or missing, or a connection is blocked?This guide covers where to look when data is out of date, a connection is blocked or a feature looks locked, and how to ask support for help.6 min readHow do you get started with Crossell?You create your account, connect your first store and see where your data lands in the first hour.6 min read

Updated 2026-10-31