> For the complete documentation index, see [llms.txt](https://support.storefront.co.za/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.storefront.co.za/signing-in-and-your-account/signing-in.md).

# Signing In

Access to the back office is protected by a secure sign-in service. Rather than the store holding your password itself, sign-in is handled by a dedicated identity provider, which is what allows features such as multi-factor authentication to be offered.

### How to Sign In

1. Go to your back office address
2. Enter the email address your account was created with
3. Enter your password
4. Complete the additional verification step if you are prompted for one

Once you have signed in, you are taken to your dashboard.

### Multi-Factor Authentication

Multi-factor authentication, often shortened to MFA, adds a second check on top of your password. After entering your password you confirm it is really you, usually by entering a short one-time code.

The reason for this is simple: a password on its own can be guessed, reused or phished. A second factor means that someone who has your password still cannot reach your store data.

The first time you sign in after MFA is switched on, you are guided through setting up your second factor. After that, you are asked for it when you sign in.

{% hint style="info" %}
Keep a record of any recovery codes you are given during setup, and store them somewhere safe and separate from your device. They are how you get back in if you lose access to your second factor.
{% endhint %}

### If You Cannot Sign In

* **Forgotten password** - use the forgotten password link on the sign-in screen to reset it by email.
* **New device** - if you have replaced the phone or device holding your second factor, you need to set your second factor up again.
* **No access to your second factor** - use a recovery code if you have one.

### Need Help?

If you still cannot sign in, or you believe your account has been accessed by someone else, please contact our support team straight away.