Two-factor and passkey sign-in
Your business data behind a second factor, and a sign-in nobody can phish.
Your Tradescraft account holds every customer, price and invoice you have. It is protected accordingly: two-factor sign-in, passkeys that replace the password entirely, a list of every device you are signed in on, and a step-up prompt on the actions that move money or grant access.
Sign in without a password
- Register a passkey and sign in with your fingerprint, face or device PIN - nothing to type and nothing to phish.
- A passkey can also be used as your second factor, which is the strongest option available.
- Prefer codes? Use any authenticator app for standard six-digit two-factor.
Protection on the actions that matter
- Money and admin actions ask you to confirm it is really you, even mid-session.
- See every device your account is signed in on, and sign out anything you don't recognise.
- Changing your sign-in email is confirmed from both the old and the new address.
Set the bar for the whole team
- An owner can require every team member to use two-factor sign-in, not just themselves.
- Roles decide what each person can see and do, so a new apprentice never lands in the money screens.
- The last ten changes across the business are on the security page, and the full audit log is a click away.
Common questions
- What is a passkey?
- A sign-in method built into your phone or laptop that uses your fingerprint, face or device PIN instead of a password. There is nothing to remember, nothing to reuse and nothing an attacker can trick out of you, because it only works on the real site.
- Can I make two-factor compulsory for my crew?
- Yes. An owner can turn on a business-wide requirement so every team member has to set up two-factor sign-in.
- What if I lose the phone with my authenticator on it?
- Register more than one method - a passkey on your laptop as well as codes on your phone, for example - so losing one device never locks you out.
- Why does it ask me to confirm again when I am already signed in?
- Because some actions deserve it. Money movements and changes to who can access what ask for a fresh confirmation, so a borrowed or unlocked screen cannot be used to do real damage.