Two-step verification

Prev Next

Platform availability

This article refers to functionality currently available only on Awin Classic.

What is two-step verification (2SV)

Two-step verification (2SV), also known as a two-factor authentication (2FA), adds an extra layer of security to your Awin account by requiring not just your email and password, but also a second form of verification. Typically, this is a one-time code generated by an authenticator app. This ensures that even if your password is compromised, your account remains protected.

While 2SV setup is optional for general access, it's mandatory for certain high-privilege actions. Users with Owner or Admin permissions must have 2SV enabled in order to perform sensitive tasks such as downloading invoices.

We strongly recommend all users enable 2SV to enhance their account security.

Awin's 2SV also includes adaptive behavior. This means the platform checks the context of each login and only asks for a verification code when it detects something unusual - like a new device, an unfamiliar location, or an unusual time of day. If your login looks normal, you'll be signed straight in.

How to log into your Awin account

  1. Go to the Awin login page.

  2. Enter your email address and password.

  3. If you have 2SV enabled, you may be prompted to enter a verification code:

    1. Open your authenticator app (e.g., Google Authenticator, Microsoft Authenticator, Authy).

    2. Enter the current one-time code displayed in the app.

  4. Check Remember this device for 30 days to reduce future prompts (optional).

  5. Click Sign In to access your account.

If you lose access to your authenticator app

If you've lost access to your authenticator device, you can use your Recovery Code to log in:

  • This single-use code is provided during your initial 2SV setup and should be stored securely.

  • After entering your email and password, select the option to log in using a Recovery Code.

  • Once a Recovery Code is used, all existing 2SV settings are deleted from your account. You'll need to reconfigure 2SV the next time you log in.

Note

Keep your Recovery Code in a safe and accessible location. If lost and you do not have access to your authenticator app, you will need to contact Awin support for help regaining access.

If you don't have your Recovery Code, you'll need to contact us to disable the 2SV. Please follow these instructions.

You'll need to provide at least two of the following pieces of information stored in your account:

  • Amount of the last payment / on last invoice

  • Amount of users of your account

  • Payment method

  • Registration date

  • Email address of the user for whom the 2SV needs to be deactivated (mandatory)

Which authenticator apps are supported by Awin

Awin supports any time-based one-time password (TOTP) compatible authenticator app, including:

  • Google Authenticator

  • Microsoft Authenticator

  • Authy

How to set up an authenticator for Awin login

To enable 2SV with an authenticator app:

  1. Log in to your Awin account.

  2. Go to the Security section of the User account.

  3. Follow the prompts to link your account with an authenticator app.

You can also go directly to the setup page here: Set up 2SV for your Awin account.


FAQ

Why didn't I get a 2SV prompt when I logged in?

If your login looked familiar - same device, same location, same pattern - the system recognized it as normal and signed you straight in. That's expected and doesn't mean your account is less secure.

Why did I suddenly get a 2SV prompt when I haven't before?

The system picked up something different about your login - this could be a new device, a new browser, a different IP address, or an unusual time of day. Once you verify successfully, future logins from the same setup should go through without a prompt.

Does adaptive behavior affect mandatory 2SV for Owners and Admins?

Adaptive 2SV applies to all users, including Owners and Admins. However, certain sensitive actions still require 2SV to be enabled on your account, even if no prompt appears at login. Adaptive behavior determines when you're prompted - it doesn't remove the requirement to have 2SV set up.

Will I ever be asked to verify on every login?

In unusual situations, or if the system can't recognize your login, you may be prompted more often. This is intentional - it means the system is working as expected.

Can I turn off the adaptive behavior?

Adaptive behavior is part of the platform's security setup and can't be turned off. You can manage your 2SV settings in the Security section of your user account.