To ensure the security of your online payments, Multi-Factor Authentication (MFA) is required to access your BQE ePayments merchant portal. MFA is a security measure implemented on all ePayments portal user logins so as to create an additional layer of user verification that goes beyond the traditional password-based authentication and thus enhances protection against unauthorized access. When you attempt to log in to your account, you are required to provide additional verification, such as a one-time code sent to your mobile device or an authentication app.
Note: This MFA applies to your BQE ePayments merchant portal, which is different from the 2FA for your BQE CORE login. To set up 2FA for CORE, check out Enabling 2FA in CORE and Setting Up 2FA for details.
What are the various MFA options available?
You will be able to choose one of two methods to enroll in MFA.
- Text (SMS): In this method, a one-time code is sent to your registered mobile number (US and Canada phone numbers only). This method offers simplicity and accessibility with a straightforward authentication process.
- Mobile Authenticator App: Authenticator apps like Microsoft Authenticator, Google Authenticator or Okta Verify generate time-based one-time passwords on your mobile devices. These codes are refreshed every few seconds, adding a layer of security. Time-Based One-Time Password (TOTP) is the most secure method of MFA offered that requires you to either use a password manager that stores TOTP codes or download an authenticator app to store and access these codes.
How to set up MFA?
Setting up Multi-Factor Authentication (MFA) typically involves a few steps to ensure the security of your account. To enable two-factor authentication on the ePayment portal, follow these steps:
After enrolling in Multi-Factor Authentication (MFA) and attempting an additional login to the ePayments portal, you will be prompted to enter the current temporary authenticator code. However, you have the option to simplify future logins by toggling the option, Remember Me. This ensures that you won't be prompted to enter a temporary authenticator code for MFA during subsequent logins within the next 30 days. This functionality streamlines the login experience while maintaining the security provided by MFA.