Login & Security

Your login (email, password, Google sign-in, and 2FA) belongs to you, not to a store. The same security settings apply in every store you own or collaborate on. Manage them in Settings → Account & Profile (also reachable from the account menu → My account).

Logging in

Go to e2c.store/login and either:

• enter your Email and Password and click Log In, or
• use Sign in with Google.

If you have access to more than one store, you'll choose which one to open. See Manage Stores.

To log out, open the account menu (top-right of your dashboard) and click Log out. Logging out only ends the session on that browser; you stay logged in on your other devices.

Passwords

Passwords must be at least 8 characters and include an uppercase letter, a lowercase letter, a number, and a special character.

Resetting your password

There's no "change password" option inside the dashboard. To change a password you know, use Forgot Password? as above.

• Wait a minute between requests. Asking again too soon shows "Please wait up to a minute to request a new password reset email."
• "We could not find an E2C account for that email address" means no active account uses that email. Check for typos, or that you used the email you signed up with.
• Google accounts can use Forgot Password to add a password, after which both sign-in methods work.

Two-factor authentication (2FA)

2FA adds a second step at login: after your password (or Google), you enter a 6-digit code from an authenticator app on your phone. Any standard authenticator app works, such as Google Authenticator, Microsoft Authenticator, or Authy.

Turning on 2FA

Logging in with 2FA

After your password or Google sign-in, the Verify Your Identity page asks for the 6-digit code from your app. Click Verify.

• Remember this device for 30 days is ticked by default. On that browser, password logins skip the code for 30 days. Untick it on shared or public computers.
• Google sign-in always asks for the code, even on a remembered device.
• You have 10 minutes after entering your password to enter the code. After that, start the login again.

Backup codes

If you don't have your phone, click Use a backup code instead on the Verify Your Identity page, enter one of your 8-character codes, and click Verify Backup Code.

• Each code works once. After use it's gone.
• You can't generate new codes on their own. When you're running low, turn 2FA off and back on. You'll get a fresh set of 8, and you'll need to re-scan the new QR code in your app.

Turning off 2FA

Switch off Enable 2FA in Account & Profile and confirm Yes, disable 2FA. This also cancels every "remember this device" on all browsers, and your old backup codes and authenticator entry stop working. Delete the old entry from your app.

Lost your authenticator?

1. Use one of your backup codes to log in.
2. Once in, turn 2FA off and on again to connect your new phone and get new backup codes.

If you have neither your authenticator nor a backup code, you can't get past the 2FA step yourself. Email [email protected] from your login email and explain what happened. See Support.

Sessions and timeouts

• Inactivity timeout: you're logged out after 60 minutes without activity. The login page then says "Session timed out after 60 minutes of inactivity." After you log in again, you're returned to the page you were on.
• Password reset: logs out all your other sessions (see above).
• Removed as a collaborator / store closed: you lose access to that store on your next click.
• Each device is separate: logging out on one device doesn't log you out elsewhere.

Lockouts and limits

To protect your account from password-guessing, E2C temporarily blocks repeated failures:

A successful login clears the failed-attempt count for your email.

Activity log

Every login, logout, and store switch is recorded in your store's Audit history, along with who made each change. Check it if you suspect someone else has access.

Good to know