Multi-factor authentication (MFA) provides a more secure login process and adds an extra layer of security to your user accounts. Reduce the risk of internal/external fraud, identity theft, and protect your business from attacks that may compromise your data by enabling multi-factor authentication.
To improve security for Lightspeed Retail user accounts, multi-factor authentication is now available for all users to set up in their user accounts.
This article is separated into five sections listed below.
- Using Multi Factor Authentication
- How to Enable Multi Factor Authentication
- How to Reset Multi Factor Authentication Setup
- How to View Existing Recovery Codes or Generating new Recovery Codes
- How to Disable Multi Factor Authentication
Using Multi Factor Authentication
When enabled, multi-factor authentication will:
- Require the user to input their existing password when logging in or switching users. Entering a password will trigger a password check and if the password has been compromised, the user will be notified and prompted to change their password.
- Require the user to input a six-digit authentication code generated by an authorized third-party authentication app.
- Inform users of changes to their password, email address, and MFA setup via email notifications sent to the email address associated with their user account (or the Account Owner if an email address has not been added to the account).
Multi-factor authentication is recommended for all users, but highly recommended for Admin users (including Account Owners), as Admins have full access to view and edit all stores within the account. If an Admin user becomes compromised, all account data can be accessed and altered.
How to Enable Multi Factor Authentication
- Log into the user account in Lightspeed X Series that will have Multi Factor Authentication setup on it.
- In the left hand window pane, click "Setup".
- In the sub window pane, click "Users".
- In the main window pane, scroll down and click your user account that will have Multi Factor Authentication enabled on it.
- Scroll down until you get to the section named "Security and ID".
- Click "Set up multi-factor authentication".
- Click "Get started".
- Enter your password and then click "Next".
- Use a third party authentication app like Authy, Google Authenticator or Microsoft Authenticator on a phone or tablet that you use.
- Scan the QR code with the authentication app you've chosen to use to add it and then click "Next". * Please note that the QR code has been blanked in the screenshot for security purposes. *
- You will now be prompted to enter the authentication code that has been generated in the authentication app on your phone or tablet.
- Once entered, you will then be prompted to save your recovery code by either printing, copying them to the clipboard or downloading them. Please choose whichever method you wish to save a copy of them for when you don't have access to your authenticator app on your phone or tablet. * Please note that the QR code has been blanked in the screenshot for security purposes. *
- Once you have chosen your method, click "I've saved these codes". Please note that you can choose more than one option.
- Multi Factor Authentication has now been enabled and configured for this user account in Lightspeed X Series as shown below.
How to Reset Multi Factor Authentication Setup
If you have lost access to your authentication app, reset your multi-factor authentication setup. This will replace your current multi-factor authentication setup and generate new recovery codes.
- Be logged into your user account in Lightspeed X Series.
- In the left hand window pane, click "Setup".
- In the sub window pane, click "Users".
- In the main window pane, scroll down and click your user account that will have Multi Factor Authentication reset on it.
- Scroll down until you get to the section named "Security and ID".
- Click "Reset multi-factor authentication setup".
- Click "Get started".
- Enter your password and then click "Next".
- Use a third party authentication app like Authy, Google Authenticator or Microsoft Authenticator on a phone or tablet that you use.
- Delete the existing entry in your authentication app.
- Scan the QR code with the authentication app you've chosen to use to add it and then click "Next". * Please note that the QR code has been blanked in the screenshot for security purposes. *
- You will now be prompted to enter the authentication code that has been generated in the authentication app on your phone or tablet.
- Once entered, you will then be prompted to save your recovery code by either printing, copying them to the clipboard or downloading them. Please choose whichever method you wish to save a copy of them for when you don't have access to your authenticator app on your phone or tablet. * Please note that the QR code has been blanked in the screenshot for security purposes. *
- Once you have chosen your method, click "I've saved these codes". Please note that you can choose more than one option.
- Multi Factor Authentication has now been reset for this user account in Lightspeed X Series as shown below.
How to View Existing Recovery Codes or Generating new Recovery Codes
Recovery codes are used if you can't access your authentication code. Download, copy or print your recovery codes for safe keeping, or generate new ones if your code is compromised.
- Click "View recovery codes".
- Enter your password and then click "Next".
- Once entered, you will then be prompted to save your recovery code by either printing, copying them to the clipboard or downloading them. Please choose whichever method you wish to save a copy of them for when you don't have access to your authenticator app on your phone or tablet. * Please note that the QR code has been blanked in the screenshot for security purposes. *
- Once you have chosen your method, click "I've saved these codes". Please note that you can choose more than one option.
- If you need to generate new recovery codes, click "Generate new recovery codes".
- Enter your password and then click "Next".
- Once entered, you will then be prompted to save your recovery code by either printing, copying them to the clipboard or downloading them. Please choose whichever method you wish to save a copy of them for when you don't have access to your authenticator app on your phone or tablet. * Please note that the QR code has been blanked in the screenshot for security purposes. *
- Once you have chosen your method, click "I've saved these codes". Please note that you can choose more than one option.
How to Disable Multi Factor Authentication
- Be logged into your user account in Lightspeed X Series.
- In the left hand window pane, click "Setup".
- In the sub window pane, click "Users".
- In the main window pane, scroll down and click your user account that will have Multi Factor Authentication removed from it.
- Scroll down until you get to the section named "Security and ID".
- Click "Remove multi-factor authentication".
- You will be prompted that you are about to remove multi-factor authentication for this user account in Lightspeed X Series. Click "Next".
- Enter your password and then click "Remove multi-factor authentication".
- You will now see that Multi Factor Authentication is no longer enabled on this user account.
Comments
0 comments
Article is closed for comments.