Summary

As of March 30, 2025, Tradeshift Go virtual cards backed by American Express (AMEX) will utilize two factor authentication for a more secure spend management process.

What is Two Factor Authentication (2FA)

What is 2FA? 2FA or Two Factor Authentication is a solution where two distinct factors are used to authenticate a user before they can access the product in question. The first factor is the knowledge factor which is tied to a user’s username and password.

The second factor is tied to the possession factor in that the user has to be in possession of the device where the one time pin code is generated to be entered and successfully validated before the user can be authenticated and gain access to the product in question.

The more secure method supporting the second factor is where the user is using an authenticator app which generates the pin code required to be entered as part of the authentication process.

The Tradeshift 2FA solution is based on Amazon’s Cognito service and supports:

• A variety of authenticator apps to generate the one time code used to authenticate the user upon login to Go.

FAQs

What is 2FA?

2FA or Two Factor Authentication is a solution where two distinct factors are used to authenticate a user before they can access the product in question. The first factor is the knowledge factor which is tied to a user’s username and password.

The second factor is a one-time code generated on a device you possess, which you must enter and validate to gain access.

Why does Tradehift Go require 2FA?

There are a number of benefits associated with using 2FA to authenticate users. The main and primary benefit is that it will make your account more secure as it is much harder for malicious users to gain access to your account. For compliance reasons Go will be required to implement 2FA in early 2025.

When will 2FA be required to access Go?

2FA will be implemented on March 30, 2025 and will be required when trying to access your Go account.

What will happen if I don’t set up 2FA by March 30, 2025?

If you haven’t set up 2FA, no problem. The first time you try to access your account you will be prompted to set it up. It should take no longer than a few minutes.

Do I need to reset my password as part of activating my 2FA?

No, 2FA is just an additional verification method on top of the username and password you already have established.

Do I need to use 2FA every time I log in?

Yes, for maximum security, Tradeshift Go requires 2FA every time you log in. This ensures that only you can access your account, protecting your sensitive financial information.

What happens if I lose or get a new phone?

If you lose or replace your phone, you will need to reset 2FA for any accounts linked to it. However, you can transfer your 2FA settings to a new device without resetting everything. If you're using Google Authenticator, for example, you can manually transfer your 2FA details by disabling it on your account, re-enabling it, and then setting it up again on your new device using the same key or QR code.

Can I opt out of 2FA?

No, 2FA will be a mandatory requirement for all users starting on March 30, 2025. This is to ensure the highest level of security for your account.

What phone number should I use for 2FA enrollment?

Please use your primary (mobile) phone number, the one you will most likely have access to for receiving authentication codes.

Is there a cost associated with using 2FA?

There is no cost involved, as using an authenticator app for 2FA is free.

Which authenticator apps can I use?

You can use any standard authenticator app to generate one-time passcodes for secure login. We recommend the following apps:

• Google Authenticator (iOS) | Google Authenticator (Android)

• Microsoft Authenticator (iOS) | Microsoft Authenticator (Android)

• Authy (iOS) | Authy (Android)

How to set up your authenticator app:

1. Install the authenticator app of your choice on your mobile phone.

2. Open the app and follow the setup instructions.

3. On our login page, scan the QR code provided to link your account.

4. Enter the generated code to complete the setup.

Once set up, your authenticator app will generate secure codes each time you log in.