Help
Log in

Deactivating two-step authentication

You can deactivate two-step authentication. If you set up multiple authentication methods and you deactivate the primary method, then the next available backup method becomes the primary method. Deactivating two-step authentication can be necessary if you're switching to a new authentication method or device.

You might need to verify your identity before you can change or remove an authentication method.

If a secure sign-in method is required by your organization or because you have access to financial products, then you can't remove your last method. For details, refer to secure sign-in requirements for financial products.

If you deactivate all your two-step authentication methods, then your account is less secure, even if you have a passkey. A passkey protects only the logins that use it. Learn more about passkeys and two-step authentication.

On this page

Deactivate two-step authentication when you have access to an authentication method

You can deactivate any active two-step authentication method from your account's Security settings. First, log in to your account by using your primary method, a backup method, or a recovery code. Logging in with a recovery code doesn't deactivate any of your methods.

You can also deactivate an authentication method when it's the only method on your account, unless a secure sign-in method is required by your organization or because you have access to financial products.

Steps:

Desktop

  1. From your Shopify admin, click your store name.

  2. Click your profile, and then click Security.

  3. In the Two-step authentication section, click Remove next to the authentication method that you want to deactivate.

  4. If you're prompted to verify your identity, then complete the verification.

  5. In the confirmation dialog, click Remove.

Mobile
  1. From your Shopify app, tap the icon next to your store name.
  2. Tap your name.
  3. Tap Manage account. It opens in your mobile browser.
  4. Tap the Security tab.
  5. In the Two-step authentication section, tap Remove next to the authentication method that you want to deactivate.
  6. If you're prompted to verify your identity, then complete the verification.
  7. In the confirmation dialog, tap Remove.

Deactivate two-step authentication when you don't have access to any authentication method

If you can't use your primary method, any backup authentication methods, or a recovery code, then you can request removal of two-step authentication through account recovery.

Steps:

  1. Go to accounts.shopify.com and select Your store.

  2. Enter your current login credentials.

  3. When prompted for a security method, select Use a recovery code. You can select this option even when you no longer have access to any previously saved recovery codes.

  4. Click Recover my account.

    The Use a recovery code screen during login, with the Recover my account link highlighted beneath the other authentication options.

  5. Enter the 6-digit verification code sent to your account email address, and then click Verify.

  6. If additional information is needed, then follow the instructions to verify your identity by using Stripe's verification portal. Learn more about identity verification on Shopify.

After submitting the required information, you receive a confirmation email to let you know the account recovery process has begun. When the review is complete, you receive a follow-up email with further steps to help you regain access to your account.