Security · 29 October 2026
Partners,the same rule.
Reviewing or deciding a merchant's application, messaging merchants, and changing the team or settings in the partner portal now need two-factor authentication, as changes in the merchant app already did.
The details
What changed.
A partner who approves a merchant's application decides who can take payments through them. That is as much a change to how payments flow as editing a provider in the merchant app, where a second factor has been required since 23 October. The partner portal now asks for the same.
Who it affects: partner users whose role can review or decide applications, send messages, or manage the team or settings. Reading applications, documents and merchants stays open, so nobody is locked out while they set it up. Turn it on under Settings in the portal; the portal says so on every page until it is on.
One more change for every account: a session left alone for 15 minutes now stops working everywhere. With two-factor on, it locks and a code opens it again; without it, there is nothing to unlock it with, so it ends and you sign in again with a new link.