Account Security & Access Controls
Protect your merchant account, manage devices, and configure staff security
Password Requirements
Because your Teyweb account controls financial payouts, customer records, and store configurations, we enforce strict password security standards upon registration and password changes:
- Minimum 8 characters in length (12+ characters strongly recommended)
- Must contain at least one uppercase letter (A-Z)
- Must contain at least one lowercase letter (a-z)
- Must contain at least one numerical digit (0-9)
- Must contain at least one special character (!@#$%^&*()_+~)
Email & Device Verification
When you register a new account or attempt to log in from an unrecognized browser, IP address, or physical device, Teyweb automatically initiates a Device Verification Gate.
A 6-digit numeric OTP code is generated and sent to your registered merchant email address. The code expires in 10 minutes. Enter the OTP code on the verification screen to authenticate the new device.
Never Share Verification OTPs
Teyweb support staff will NEVER ask you for your password or email verification OTP. Never provide OTP codes over phone calls, SMS, or WhatsApp messages.
Active Sessions & Device Audits
You can inspect all active sessions connected to your store under Profile > Security. Each session record displays:
- Browser & Operating System (e.g., Chrome on macOS, Safari on iPhone)
- Approximate Geographical Location based on IP address
- Last active timestamp
If you notice any unfamiliar session or lose a mobile device, click "Revoke All Other Sessions". This immediately invalidates all active refresh tokens across all devices except your current browser.
Password Recovery Workflow
If you lose access to your password:
1. Go to app.teyweb.com/forgot-password.
2. Enter your registered merchant email address.
3. Check your inbox for a secure password reset link (valid for 1 hour).
4. Click the link and enter your new password complying with security standards.
5. Once updated, you will be redirected to log in with your new credentials.
Merchant Security Best Practices
To keep your store secure in day-to-day operations:
1. Never share your primary Superadmin credentials with employees or store managers. Instead, create separate staff accounts with restricted roles via Settings > Users & Permissions.
2. Use a trusted password manager (1Password, Bitwarden, or Apple Keychain) to generate random credentials.
3. Ensure the email address connected to your store has Two-Factor Authentication (2FA) enabled on your email provider (e.g., Google or Microsoft).
Was this guide helpful?
Help us improve our merchant documentation by sharing your feedback.