To better protect your data and order security, OneShip adds a two-step verification layer to your account, which helps prevent unauthorized access—making it harder for attackers to compromise your account even if your password is compromised.

Why enable two-step verification?

• Enhanced security: Prevents unauthorized access even if your password is leaked or stolen.
• Phishing protection: Blocks attackers from logging in without the second verification code.
• Flexible options: Supports verification via authentication APP / email / SMS.

When is two-step verification required?

When you enable two-step verification, it will be triggered in the following scenarios:

1. Logging in on a new device
2. Your browser is identified as risky
3. You have not logged into your account for a long time

After entering your account and password, you will need to complete secondary authentication through a verification method supported by OneShip. You will receive a one-time verification code in your email / SMS / authentication app. Enter the verification code into the verification box to complete the identity authentication.
 

How to set up two-step verification?

Enable two-step verification

1. From your OneShip admin panel, click the profile picture in the upper right corner and select Account Management.
2. Jump to the Account Management page and click Enable two-step verification.
   Enter your log-in password and the verification code from your mailbox or mobile phone to confirm your identity.
3. Select a verification method (authentication app/phone number/email), and click Continue to obtain the verification code.
4. Enter the verification code into the verification box, and click Confirm and enable to activate two-step verification.

Change a verification method

If your current verification method has expired and you need to switch to a new one, you should first deactivate the current verification method, then re-enable two-step verification, select the new verification method, and complete the verification.

Disable two-step verification

1. Enter the Account Management page and click Disable two-step verification.
2. Enter your login password to verify your identity.
3. Verify again using a two-step verification method (authentication app / SMS / email) or a recovery code verification.

Two-step verification will be disabled only after completing the above identity verification.

Recovery code

What is a recovery code?

A recovery code is a one-time-use backup verification code that serves as an "emergency key" when you are unable to receive verification codes for two-step verification (such as authentication app and phone number). Recovery codes are automatically generated when two-step verification is successfully enabled; please be sure to save them promptly.

When can recovery codes be used?

• When two-step verification is enabled, a second authentication is required when logging into the account. 
• A second authentication is required before disabling two-step verification.