Xendit provides various security measures to allow you to protect your business account.

2-Factor Authentication is an industry-standard approach to keep an extra layer of security on your account to prevent unauthorized login. You can register your Android or iOS devices to enable 2-factor Authentication mechanism in Dashboard

Steps to set up:

1. Go to Settings -> Your Profile -> 2-factor Authentication -> Setup 2FA

2. After setting up, this 2-factor Authentication will appear if Dashboard detects login attempt from an unregistered network or device yet

There are 2 options for 2-Factor Authentication, as follows

Authenticator app
After clicking on the “Setup 2FA” button, a modal will show up with 2 choices of 2FA: authenticator and SMS. If users choose authenticator app, then the next step will show up informing users how to set it up:

1. Download an authenticator app (Google Authenticator, Authy, or Microsoft Authenticator)
   • If you are using iOS, you can search "authenticator" on Apps Store.
   • If you are using Android, you can search "authenticator" on Google Play Store.
2. Select the authenticator app based on your preference and follow the complete steps until the app is fully downloaded and accessible on your end.
3. Scan the QR code appeared when you select Authenticator app as 2FA setup.
4. Enter the authentication code generated from your Authenticator App.
5. After users enter the 6-digit code, the “Enable” button will be activated and on next modal will show the backup codes.

SMS
After clicking on the “Setup 2FA” button, a modal will show up with 2 choices of 2FA: authenticator and SMS. If users choose SMS, then the next steps on how to enable it will appear.

1. Users have to fill in their phone number field. The field will be automatically filled in with their mobile number (if any). Any changes on this field will reflect on the mobile number on the mobile settings section.
2. OTP will be sent afterwards. When users enter all the numbers, “Enable” button will be activated allowing them to finish the 2FA activation.