Two-factor authentication (2FA) adds a second verification step when your team members sign in to Rebuy. After entering their login details, each team member must also enter a verification code sent to their email address. You may also see this called multi-factor authentication (MFA).
This guide explains when Rebuy requires two-factor authentication, how store admins turn the 2FA requirement on or off in Settings > Manage Team, and what team members need to do to sign in once 2FA is required.
Note: Rebuy two-factor authentication currently supports email verification only. Support for authenticator apps is coming soon.
Is Two-Factor Authentication Turned On for My Rebuy Store?
Whether two-factor authentication is already required for your Rebuy store depends on when you installed Rebuy. Starting in September 2026, Rebuy requires 2FA for all new installs. Stores that installed Rebuy before then keep their current sign-in settings, and 2FA is not turned on for them automatically.
Install date | Is 2FA required by default? | What you need to do |
September 2026 or later | Yes, 2FA is required for all new Rebuy installs | Nothing. Team members set up email verification the first time they sign in. |
Before September 2026 | No, Rebuy did not turn on 2FA automatically | If you want to require 2FA, turn it on in Settings > Manage Team. |
How to Require Two-Factor Authentication for Your Rebuy Team
Store admins can require two-factor authentication for every team member who signs in to the Rebuy store. If your store installed Rebuy before September 2026, follow these steps to turn on the 2FA requirement.
In the Rebuy Dashboard, go to Settings.
Select Manage Team.
Turn on the Require Two-Factor Authentication toggle.
Once you turn on the toggle, every team member must set up two-factor authentication with their email address before they can sign in to the store. If you'd like to turn it off, then you can un-toggle the button to remove the 2FA requirement.
How Team Members Set Up Two-Factor Authentication in Rebuy
When a Rebuy store requires two-factor authentication, each team member completes email verification before they can access the store. Team members set up 2FA using the email address tied to their Rebuy login.
Sign in to Rebuy with your usual login details.
Check the inbox for the email address on your Rebuy account for a verification code.
Enter the verification code in Rebuy to finish signing in.
Frequently Asked Questions About Two-Factor Authentication in Rebuy
Is two-factor authentication required for every Rebuy store?
Two-factor authentication is defaulted to required for all Rebuy stores installed in September 2026 or later. Stores that installed Rebuy before September 2026 do not have 2FA turned on automatically. Admins at those stores can choose to require it in Settings > Manage Team.
Can I use an authenticator app for Rebuy two-factor authentication?
Rebuy two-factor authentication currently works with email verification only. Support for authenticator apps is coming soon. Until then, team members receive their verification code at the email address on their Rebuy account.
Does the Rebuy 2FA requirement apply to all team members?
Yes, when a store admin turns on Require Two-Factor Authentication, the requirement applies to every team member who signs in to that Rebuy store. Each team member must set up email verification before they can sign in.
Can I turn off two-factor authentication after I turn it on?
Yes, store admins can turn off the two-factor authentication requirement at any time. Go to Settings > Manage Team and turn off the Require Two-Factor Authentication toggle. Team members will no longer need a verification code to sign in.
