Account security
This page shows how to protect your Selltics sign-in with two-factor authentication and how to manage trusted devices, your password and your signed-in sessions. Every setting here is on the Security page of the management dashboard, opened from your user menu.
When two-factor authentication is required
Two-factor authentication (2FA) adds a six-digit code from an authenticator app to your password. Selltics supports authenticator apps only, such as Google Authenticator or any other app that shows time-based codes.
- Required: when any organization you belong to has a connected Amazon Ads or Amazon Selling Partner account, in any status, a connection waiting for reauthorisation included.
- Before connecting: connecting or reauthorising an Amazon account needs a session that was signed in with your authenticator (see Connections).
- Optional otherwise: without a connected Amazon account you can turn it on or leave it off.
If you are asked to set it up after signing in
When 2FA is required and your account does not have it yet, the management dashboard opens a Set up two-factor authentication screen right after you sign in. It says why: "Your account has connected data sources, so two-factor authentication is required." Nothing else opens until you finish the setup below, or press Sign out.
The Amazon dashboard sends you to the same screen, and you return to the page you were on once the setup is done.
Turn on two-factor authentication
- Open Security from your user menu; the Two-factor authentication section reads Off.
- Press Set up.
- Step 1: scan the QR code with your authenticator app and press Next. If you cannot scan it, open Can't scan? and type the setup key into the app instead.
- Step 2: enter the six-digit code the app shows.
- Step 3: save your recovery codes (see below), tick I have saved these codes and press Done.
The section then reads On and shows how many recovery codes are left. Your other sessions are signed out, and Selltics emails you "Two-factor authentication is on". If the setup takes too long, its key expires and the setup starts again with a new QR code.
Recovery codes
At setup you get 10 recovery codes of the form xxxxx-xxxxx. Each one replaces an authenticator code once.
- They are shown only once: press Download or Copy all and keep them somewhere safe, away from your phone.
- Each time a recovery code is used, Selltics emails you and the section shows how many are left.
- Regenerate recovery codes issues a new set of 10. It asks for a code from your authenticator app — a recovery code is not accepted — and your previous codes stop working at once.
Sign in with a code
With 2FA on, signing in — with a password or with Google — continues on a Two-factor authentication screen:
- Optionally tick Trust this device for 30 days.
- Enter the six-digit code from your authenticator app; a complete code is sent by itself.
After 10 wrong codes in a row, the second step is locked for 15 minutes.
Use a recovery code
On the same screen press Use a recovery code and enter one of your codes, with or without the dash. After it is accepted the screen shows how many codes you have left and links to the Security page, so you can replace your authenticator and generate a new set.
Trusted devices
A browser where you ticked Trust this device for 30 days skips the code at sign-in for 30 days; the period is not extended by using it.
- The Trusted devices section of the Security page shows how many browsers are trusted.
- Forget all trusted devices makes every browser, this one included, ask for a code at the next sign-in. Nobody is signed out.
- Changing your password and turning 2FA off also forget every trusted device.
Replace your authenticator
Use this when you move to a new phone or app.
- On the Security page press Replace authenticator.
- Enter a code from your current authenticator, or a recovery code.
- Scan the new QR code and confirm with a code from the new app.
Your recovery codes do not change.
Turn two-factor authentication off
Turn off asks for an authenticator code or a recovery code. Turning it off signs out your other sessions and forgets your trusted devices.
Blocked while Amazon is connected
While any of your organizations has a connected Amazon account, Turn off is disabled with the reason "Two-factor authentication can't be turned off while your organization has connected data sources." It becomes available once none of your organizations has a connected Amazon account.
Change your password
Change password in the Password section asks for your current password and the new one twice. The new password follows the same rules as at sign-up (see Getting started).
- Your other sessions are signed out; this one stays signed in.
- Every trusted device is forgotten.
- If you signed up with Google, the section reads "You sign in with Google. No password is set." and offers to set one instead (see below).
Set a password on a Google account
An account that signs in only with Google can add a password, so you can also sign in with your email address and that password.
- Open Security from your user menu. The Password section reads "You sign in with Google. No password is set."
- Press Set a password.
- Enter the new password twice. It follows the same rules as at sign-up.
- If two-factor authentication is on, also enter a code from your authenticator app or a recovery code in Authenticator or recovery code.
- Press Set password. The page confirms "Password set. Other sessions were signed out."
After that you can sign in with Google or with your email and the new password. Your other sessions are signed out, every trusted device is forgotten, and Selltics emails you that a password was added to your account.
Sign in again first
Adding a password needs a recent sign-in, within the last 10 minutes. If the dialog says Sign in again to continue, sign out, sign in with Google again and come back to the Security page.
If the dialog says A password can't be added to this account, your email address already signs in with a password on another Selltics account. Keep signing in with Google and write to [email protected].
Sessions and signing out everywhere
The Active sessions table lists every browser signed in to your account, with its device, sign-in time, last activity and how it signed in; your current browser is marked This device.
- Sign out on a row ends that one session.
- Sign out of all other sessions keeps only this browser signed in.
- Sign out everywhere signs out every browser, this one included, and returns you to the sign-in page.
Accept updated terms
When the Terms of Service or the Privacy Policy change, or your account has no acceptance on record, Selltics asks you to accept them before you continue. The management dashboard opens a Review the updated terms screen. The Amazon dashboard sends you to the same screen, and an invitation link shows Review and accept the updated terms, which opens it.
- Open Terms of Service and Privacy Policy from the screen; each shows its version.
- Tick I am 18 or older and use Selltics for business.
- Press Accept. You return to the page you were on.
Nothing else in the management and Amazon dashboards opens until you accept; the only other choice is Sign out. If the documents change while you are reading, the screen asks you to review the current versions and accept again.
Lost your phone or your recovery codes
- You still have a recovery code: sign in with it, then use Replace authenticator with another recovery code and generate a new set.
- You have lost both: write to
[email protected]from the email address you sign in with. Support checks your identity before it turns 2FA off; the check takes at least 24 hours. Afterwards you set up 2FA again at your next sign-in if your account requires it.
The sign-in screen states the same under Lost your authenticator and recovery codes?
Related
- Getting started — sign-up, email confirmation and the first connection.
- Connections — connecting Amazon Ads and Amazon Selling Partner.
- What Selltics stores about your account and your second factor is described in the Privacy Policy.