A login check is a second check at sign-in, so someone who learns a password still can’t get in. There are three kinds:
- Passkey (best). Face ID, your fingerprint or Windows Hello on your phone or computer. It replaces the password: one tap and you’re in.
- Authenticator app. A 6-digit code from an app such as Google Authenticator or Microsoft Authenticator, typed after your password. Good as a backup, and on a computer that can’t hold a passkey.
- Emailed code. A 6-digit code emailed after your password. It is only offered when your login’s email address has been confirmed, because many logins are not real mailboxes.
Turning it on for your shop
Go to Settings → Manage Users and tick Require a login check for everyone in this shop. It takes effect from each user’s next sign-in; anyone already signed in stays signed in. Untick it to turn it off.
Only users who can manage users see this setting.
Setting yours up the first time
When your shop requires a login check and you don’t have one yet, you sign in with your password as usual and land on Set up your login check. You can’t use the rest of JewelTrak until you’ve set one up.
- Add a passkey on this device: your phone or computer asks for Face ID, your fingerprint or Windows Hello. Done. Do this again on each device you use.
- Set up an authenticator app: enter your password, scan the QR code with the app, and type the code it shows. Then save the backup codes it gives you (print them or write them down). Each one signs you in once if you lose your phone.
- Email me a confirmation link: if your login’s email address is a real mailbox you check, confirm it and emailed codes become available.
You can come back any time to add a passkey on a new device, set up an authenticator app, or remove an old one: open My Account from the Account menu (top right) and click Manage Login Check. The Login Check section there shows which checks you have. You can’t remove your only login check while your shop requires one.
Signing in
- With a passkey: on the sign-in page click Sign in with a passkey. No password needed.
- With an authenticator app: enter your email and password, then the 6-digit code from the app. Lost your phone? Click Use a backup code.
- With an emailed code: enter your email and password; the code is emailed and works for 10 minutes. Check spam, or click Send a new code.
Trust this computer for 30 days is ticked for you on the code screen. On your own computer, leave it ticked and you’ll only be asked for a code about once a month. On a computer other people use, untick it.
If your login has only a passkey, the password alone won’t sign you in. Use Sign in with a passkey.
Lost phone or new computer
An administrator opens the user under Settings → Manage Users and clicks Reset Login Check. This removes the user’s passkeys and authenticator app and signs them out. Their next sign-in with their password takes them to Set up your login check again.
Shops connected to Amazon
Amazon requires stronger login security from any software that holds a seller’s Amazon data. When your shop is connected to Amazon (see Connecting Amazon), a login check is always required (the setting shows Required and can’t be turned off), and every password must:
- be at least 12 characters, with an upper-case letter, a lower-case letter, a number and a symbol,
- not contain any part of your name or your email name,
- not be one of your last 10 passwords,
- be changed at least once a year.
A password can’t be changed again within a day of the last change, unless an administrator reset it.
If your password doesn’t meet these rules, or is a year old, you’ll be taken to Set Your Password right after signing in.
After 10 wrong passwords in a row the login locks for 30 minutes. Wait, or use Forgot password? to reset it.
If your shop disconnects Amazon, these password rules stop applying. The login check stays on until someone unticks Require a login check for everyone in this shop.