Set up Two-Factor Authentication login

Overview

As part of your OnlinePay onboarding process, you will be required to set up Two-Factor Authentication (2FA) to secure your account. 2FA adds an extra layer of security to your account by requiring you to provide two pieces of information to log in; something you know (your password) and something you have (a verification code). This reduces the risk of unauthorised access to your account.

When your OnlinePay dashboard is ready, we will send you an email with instructions on how to set up 2FA. You will need to activate your account by requesting a One-Time Passcode (OTP), which will be sent to your registered email address. You will have five minutes to enter the OTP in the browser. Your browser will be redirected to the Enter OTP page where you can enter the OTP to set up your password for the first time.

Once you have set up your password, you will be able to log in to the OnlinePay dashboard by providing your email address and password. In future, you will be required to provide a verification code (OTP) sent to your registered email address if you have forgotten your password, or if you need to reset your password.

Set up 2FA

To set up your OnlinePay account for the first time and enable 2FA, follow these steps:

1. Access the OnlinePay dashboard by following the instructions in your welcome email, or click the Dashboard Login link at the top of this page.
2. On the login page, click Activate Account.
   
3. Enter your email address and click Generate OTP.
   
   Your browser will automatically redirect to the Enter OTP page.
4. Check your email for the OTP and enter it in the Enter OTP page. You will have five minutes to enter the OTP.
5. When you have correctly entered the OTP, you will be redirected to the Create Password page. Enter and confirm your new password.
   When you return to the login page, you will be able to log in to the OnlinePay dashboard using your email address and password.

Minimal password requirements

For security purposes, your password must meet the following requirements:

• At least 8 characters.
• At least 1 number: e.g. 123456
• At least 1 upper case letter: e.g. ABC
• At least 1 lower case letter: e.g. abc
• At least 1 special character: e.g. @#$
• New password must match.
• Must be different from the last 10 passwords.

Incorrect OTP attempts

You will be given up to five attempts to activate your account using a One-Time Passcode (OTP) sent to your email address.

For each OTP generated, you will be given three attempts to enter the verification code correctly within five minutes of generating the OTP. If you exceed three attempts to enter the OTP, you will receive the following notification:

You have reached the maximum number of attempts. Please try to sign in again.

This message will show the first four times you generate a OTP and fail to enter it correctly within the five-minute window. If you fail to enter the OTP correctly on the fifth attempt, then try again to generate a new OTP, the following message will display:

Your account has been temporarily locked due to multiple failed login attempts. Please try again after 30 minutes.

If you exceed the number of attempts to enter the correct OTP, you will be locked out of your account for 30 minutes.

After the lockout period, you can restart your attempt to activate your account by generating a new OTP.

Receiving the OTP

If you do not enter a valid email address, you will not receive the OTP. If you do not receive the OTP, check your spam folder or contact your administrator to ensure that the email address is correct.