# Account and MFA

> Manage sign-in, account profile, and MFA controls.

Canonical: https://stafiel.org/documentation/merchant-operations/account-access
Version: v1.0.0

Merchant Dashboard supports account sign-in through Google or GitHub. Use this
page to understand the account profile and MFA controls.

## Account Profile

Open Settings > Profile to review account information and MFA status.

The Profile tab shows the User ID, account name, email address, and MFA status.
Copy the User ID when support or an account-specific operation asks for it.

## Enable MFA

Merchant Dashboard may ask for a fresh six-digit MFA code before sensitive
operations.

Select Enable MFA and complete the setup:

- Scan the QR code with an authenticator app, or enter the displayed setup key.

- Enter the six-digit authentication code.

- Save the backup code securely.

Important: The backup code can be used for account recovery or MFA reset.
Do not store it in shared notes, source code, or public issue trackers.

## Reset MFA

Select Reset MFA from the Profile tab. Reset can require either:

- A current authenticator code

- The saved backup code

After reset, bind a new authenticator device and save the new backup code.
The previous backup code becomes invalid after reset or regeneration.
Temporary cooldowns may apply after repeated or recovery-sensitive actions.

For wallet-specific security boundaries, see
[Security and Wallet Boundary](/documentation/risk-and-reference/security-and-wallet-boundary).