Protect your MaShop account
Set up two-factor authentication and keep recovery information private.
Enable two-factor authentication
Open the security settings and follow the authenticator setup. Add the displayed QR code or manual key to your authenticator, then enter its six-digit verification code. The setup is activated only after verification succeeds; opening the QR screen does not complete it.
Store recovery information
After successful verification, save the recovery codes offered by the setup flow in a secure place separate from the device you use to sign in. These codes are single-use. Generating a new set replaces unused previous codes, so keep the current set.
If recovery codes could not be retrieved, do not assume that the setup has produced usable codes. Read the notice and retain the authenticator’s manual setup information securely. Never send a recovery code, QR code or authenticator secret to support or an AI conversation.
Review connected access
Review account connections and authorized applications when a device is lost or access is no longer needed. Disconnect an obsolete authorization at the relevant provider as well as in MaShop when appropriate. Removing an authorization does not undo actions that have already occurred.
If a verification code is rejected, check the correct authenticator entry and its current code before retrying. Report the visible error and approximate time when asking for help, without including codes or account secrets. Two-factor authentication helps protect sign-in; it does not replace careful tool permissions.