Two-factor authentication (2FA)

2FA is optional, and there are two ways to do it — pick whichever suits you in Settings → Security → Two-factor authentication:

• Authenticator app: scan the QR code with any authenticator app (Google Authenticator, 1Password, Authy…). Sign-in then asks for the app's 6-digit code. Codes change every 30 seconds — enter the current one.
• Email codes: no app needed. Each new sign-in emails you a 6-digit code to type in.

A few notes:

• Lost the phone or locked out? Your agency admin can ask HiveMarket support to reset 2FA after identity verification.
• Client shoppers don't use passwords or 2FA at all — their sign-in is a one-tap emailed link that expires on its own.

We recommend turning on one of the two for every agency admin.