Two-factor sign-in
Authenticator apps, recovery codes, and a new phone.
Every MyProfit account signs in with two steps: your password, then a 6-digit code from an authenticator app on your phone. MyProfit holds your Amazon sales, fees and settlements, so a stolen password alone isn't enough to get in.
Setting it up
- Install an authenticator app if you don't have one: Google Authenticator, Microsoft Authenticator, 1Password or Authy all work.
- After you confirm your email (or the next time you sign in), MyProfit shows a QR code. Scan it with the app. Can't scan? Choose Enter the key instead and type the key into the app.
- Type the 6-digit code the app shows for MyProfit and choose Turn on two-factor.
- Save your 10 recovery codes. They're shown once: download them or copy them into a password manager, tick I've saved my recovery codes, then continue.
Signing in
Enter your email and password as usual, then the code your app shows right now. Codes change every 30 seconds, so type the current one. After 5 wrong codes, or 5 minutes, you start again from the password.
Code keeps failing? Your phone's clock is probably off. Set the date and time to update automatically, then try the newest code.
Password rules
Your password needs at least 12 characters, with upper- and lower-case letters, a number and a symbol. It can't contain your name or the first part of your email address, and it can't be one of your last 10 passwords.
- Passwords expire after a year: MyProfit asks for a new one when you next sign in.
- You can change it in Account settings once a day. If you've forgotten it, use Forgot password? on the sign-in page at any time.
- If your current password doesn't meet these rules, you'll be asked to choose a new one right after you sign in.
Lost your phone?
On the code step, choose Lost your phone? Use a recovery code and type one of your saved codes (they look like
a1b2c-3d4e5). Each code works once. Once you're in, go to Settings and:
- Move to a new phone: removes the old authenticator and shows a new QR code to scan, then new recovery codes.
- Make new recovery codes: replaces all your codes (the old ones stop working). Do this when you're down to a few.
Both ask for your password.
No phone and no recovery codes
We can reset two-factor for you after checking it's really you. Email info@myprofit.co from the address on your account.
Why not text messages or email codes?
A code sent by text can be intercepted, and one sent by email only helps if your inbox is safe: anyone who gets into your email could reset your password and read the code. An authenticator app keeps the second step on a device only you hold.