FEATURE REQUEST - Option to disable 2FA

[TSRSM-John]

Am I the only one who thinks it's absurd that 2FA isn't an opt-in feature? We have workstations with their own Shipstation logins across several locations, but only managers typically have access to the emails addresses associated with those logins. We're constantly running into issues where managers are being bothered on their days off, or while on vacation, in order to retrieve 2FA codes for staff trying to print and fulfill orders. Just this weekend I was in the mountains and had no cell service, and our staff were unable to log in to Shipstation without me.

I can see why some users would need this level of security, but for others it's just getting in the way. Please allow clients to disable 2FA.

EDIT: We've landed on a solution, for anyone interested. You can set up an inbox filter in the email where the 2FA codes are being sent that automatically forwards them to whichever emails you'd like. It's really easy to do in gmail, but I'm not sure about other services.

[joelofarc]

I agree this would be helpful in our environment as well.

[CE-Chris]

Agreed. I know they had a ton of fraud going on with compromised accounts, but its very annoying in its current state to have shared devices with different users.

Or other 2FA options would be helpful too.

[CaraAdmin]

Hello @TSRSM-John!

Thank you for your post in the community! We love hearing great ideas like this and understand how beneficial this feature would be for your team. We've shared your request with our development team for review. We appreciate your feedback—keep the ideas coming!

Happy Shipping!

-Cara

[deadjeep]

They really need to rethink this, for a company who remotes all their customer service you would think they would understand the difficulties in end users not have access to a company email. 

[beamzen]

What's interesting is that I requested to change our email address to a shared business email address thinking this would solve the issues. I answered all 7+ questions (billing info, etc. date of birth, everything but your social security number). They changed the login email address, but the verification 2FA emails are still being sent to the old/original email address. I feel like I'm taking crazy pills.