Two-Factor Authentication & Security Keys
Essential account protection protocols utilizing time-based one-time passwords and cryptographic keys.
Two-Factor Authentication (2FA) is strictly required for all withdrawal actions, credential updates, and merchant operations.
Core Architecture & Principles
- Authenticator Apps (TOTP): Full compatibility with Google Authenticator, Microsoft Authenticator, and Authy.
- Hardware FIDO2 Security Keys: Support for YubiKey and WebAuthn hardware tokens for high-value merchant accounts.
- Emergency Recovery Codes: Single-use emergency recovery passcodes generated during 2FA initialization.
Operational Process & Execution Flow
QR Code Scanning
Link your preferred authenticator app by capturing the encrypted QR token inside Account Settings.
Confirmation Handshake
Enter the first 6-digit rolling code to confirm synchronization and activate protection.
Code Vaulting
Safely record and store emergency fallback recovery codes in an offline, air-gapped vault.
Protection Guarantee
Accounts with active 2FA are covered under the ePaisay Zero-Liability Unauthorized Transaction Guarantee.