Two-factor authentication (2FA)

There are two ways to do 2FA — pick whichever suits you in Settings → Security → Two-factor authentication:

• Authenticator app: scan the QR code with any authenticator app (Google Authenticator, 1Password, Authy…). Sign-in then asks for the app's 6-digit code. Codes change every 30 seconds — enter the current one.
• Email codes: no app needed. Each new sign-in emails you a 6-digit code to type in.

Requiring it for your whole team

An agency admin can require 2FA for every team member: Settings → Security → Your team's sign-in policy → Require 2FA for my team. From then on, any staff member without a second factor is walked through a one-click email-code setup at their next visit (they can switch to an authenticator app later). The platform never forces 2FA — it's each agency's choice.

A few notes:

• Lost the phone or locked out? Your agency admin can ask HiveMarket support to reset 2FA after identity verification.
• Client shoppers don't use passwords or 2FA at all — their sign-in is a one-tap emailed link that expires on its own.

We recommend turning on one of the two for every agency admin.