Authentication and two-factor authentication in Recharge
Recharge helps protect access for both merchant users and customers through secure login and verification options.
How authentication works depends on how your team or customers access Recharge. Merchant users may access Recharge through Shopify or by signing in directly to Recharge. Customers typically access subscription management through your storefront or customer portal.
Merchant access
Merchant users are team members who access Recharge to manage subscriptions, customers, orders, analytics, and store settings.
Recharge supports two merchant access methods:
- Access through Shopify
- Direct Recharge login
Access through Shopify
Many merchants access Recharge through Shopify, including from the Shopify admin or the embedded Recharge app.
When your team accesses Recharge through Shopify, Shopify authenticates the user first. Recharge then validates the Shopify identity and grants the appropriate access to Recharge.
Recharge does not collect or store Shopify staff passwords.
If your organization uses single sign-on (SSO) or multi-factor authentication (MFA) in Shopify, those settings are managed and enforced by Shopify.
Direct Recharge login
Some merchant users may sign in directly to Recharge instead of using Shopify to access it.
When a user signs in directly to Recharge, Recharge requires an additional verification step before granting store access. Recharge sends a verification code to the user’s registered email address, and the user must enter the code before accessing the store.
This additional verification step helps protect merchant accounts when Recharge manages the login experience directly.
Customer access and verification
Customer access is separate from merchant access.
Customers typically manage their subscriptions through your storefront or customer portal. Recharge also offers optional customer verification to help protect sensitive account and subscription changes.
When customer verification is enabled, Recharge can require customers to verify their identity before completing actions such as updating account information, managing addresses, or updating payment details.
If verification is required, Recharge sends a time-limited verification code to the customer. After the code is successfully entered, the customer can complete the requested action.
Customer verification is designed to protect sensitive actions without adding friction to every customer interaction.
