Two-factor sign-in
Authenticator apps, recovery codes, and a new phone.
Every MyProfit account connected to Amazon signs in with two steps: your password, then a passkey (Face ID, your fingerprint or Windows Hello) or a 6-digit code from an authenticator app. Amazon requires it for apps that use sellers' Amazon data, and it means a stolen password alone isn't enough to get into your sales, fees and settlements. You turn it on when you first connect Amazon.
Setting it up
When you choose to connect Amazon (or the next time you sign in to an account that's connected), MyProfit asks you to pick one:
- A passkey (quickest): choose Use a passkey and confirm with Face ID, your fingerprint or Windows Hello. Nothing to install. A passkey saved in iCloud Keychain or Google Password Manager also works on your other devices signed in to the same account.
- An authenticator app: install Google Authenticator, Microsoft Authenticator, 1Password or Authy (an iPhone's built-in Passwords app works too), scan the QR code (or choose Enter the key instead), type the 6-digit code it shows and choose Turn on two-factor.
Then save your 10 recovery codes. They're shown once: download them or copy them into a password manager, tick I've saved my recovery codes, then continue.
Signing in
Enter your email and password as usual, then choose Use your passkey, or type the code your authenticator app shows right now (codes change every 30 seconds). After 5 failed tries, or 5 minutes, you start again from the password.
Continue with Google takes the place of your password: an account connected to Amazon still does its second step after it. Google doesn't tell apps whether you used 2-Step Verification, so it can't replace the passkey or code.
Code keeps failing? Your phone's clock is probably off. Set the date and time to update automatically, then try the newest code.
Password rules
Your password needs at least 12 characters, with upper- and lower-case letters, a number and a symbol. It can't contain your name or the first part of your email address, and it can't be one of your last 10 passwords.
- Passwords expire after a year: MyProfit asks for a new one when you next sign in.
- You can change it in Account settings once a day. If you've forgotten it, use Forgot password? on the sign-in page at any time.
- If your current password doesn't meet these rules, you'll be asked to choose a new one right after you sign in.
Passkeys and devices in Settings
In Settings you can add a passkey on another device, see when each was last used and remove one you no longer have. Removing a passkey asks for your password.
Lost your phone or device?
On the second step, choose Use a recovery code and type one of your saved codes (they look like
a1b2c-3d4e5). Each code works once. Once you're in, go to Settings and:
- Add a passkey on the device you have now, and remove the lost one.
- Move to a new phone (authenticator app): removes the old authenticator and shows a new QR code to scan, then new recovery codes.
- Make new recovery codes: replaces all your codes (the old ones stop working). Do this when you're down to a few.
Each asks for your password.
No device and no recovery codes
We can reset two-factor for you after checking it's really you. Email info@myprofit.co from the address on your account.
Why not text messages or email codes?
A code sent by text can be intercepted, and one sent by email only helps if your inbox is safe: anyone who gets into your email could reset your password and read the code. Amazon's security guidance for apps like MyProfit lists authenticator apps, security keys and biometrics (which is what a passkey uses) as the second steps it accepts.