Two-Factor Authentication (2FA) adds an extra layer of security to your account. In addition to your password, you’ll need to enter a one-time verification code from an authenticator app. This helps protect your account even if your password is compromised.
We use a time-based one-time password method, generated by apps such as Google Authenticator, Microsoft Authenticator etc.
How to activate Two-factor authentication
Log in to Payment Admin.
Go to Settings → Account.
Enable Two-factor authentication.
Once activated:
2FA will be required for all employees with login rights.
It applies to both Admin and the POS app.
Users who are already logged in will remain logged in. The verification code will be required at the next login.
First login after activation (setup process)
After 2FA is enabled in Admin, each user must set up their authenticator app during their next login.
Step 1: Log in
Enter your email and password when as usual (in Admin or on the POS).
If correct, you will be redirected to the 2FA setup page.
Step 2: Scan the QR code
A QR code will be displayed.
A secret key will also be shown as text (for manual setup or browser-based authenticators).
Install your preferred authenticator app (e.g. Google Authenticator). Open it.
Select “Add new account” (+) and scan the QR code shown in Paymash (or enter the key manually).
Step 3: Enter the verification code
Your app will generate a 6-digit verification code (refreshes every 30 seconds).
Enter this code on the 2FA page in Paymash.
If the code is correct, you will be logged in and 2FA will be successfully set up.
You will also receive a confirmation email.
If the code is incorrect, you can try again.
Once 2FA is set up:
Each time you log in to Admin or the POS you will need to enter the 6-digit verification code from your authenticator app.
Resetting Two-factor authentication
You may need to reset 2FA if you:
Lose your device
Delete or reinstall your authenticator app
Switch to a new device or authenticator app
How to reset
Enter your email and password on the login page.
On the verification code page, click “Reset 2FA”.
You will receive an email with a secure reset link (valid 10 minutes).
Click the link to invalidate your old authentication setup.
You will be redirected to Admin where you can set up the 2FA again starting from Step 1.
If you need assistance with setting up or resetting Two-Factor Authentication, please contact our Support Team.