Multi-Factor Authentication on ePayments Portal

To ensure the security of your online payments, Multi-Factor Authentication (MFA) is required to access your BQE ePayments merchant portal. MFA is a security measure implemented on all ePayments portal user logins so as to create an additional layer of user verification that goes beyond the traditional password-based authentication and thus enhances protection against unauthorized access. When you attempt to log in to your account, you are required to provide additional verification, such as a one-time code sent to your mobile device or an authentication app. 

Note: This MFA applies to your BQE ePayments merchant portal, which is different from the 2FA for your BQE CORE login. To set up 2FA for CORE, check out Enabling 2FA in CORE and Setting Up 2FA for details.

What are the various MFA options available?

You will be able to choose one of two methods to enroll in MFA.

  • Text (SMS): In this method, a one-time code is sent to your registered mobile number (US and Canada phone numbers only). This method offers simplicity and accessibility with a straightforward authentication process.
  • Mobile Authenticator App: Authenticator apps like Microsoft Authenticator, Google Authenticator or Okta Verify generate time-based one-time passwords on your mobile devices. These codes are refreshed every few seconds, adding a layer of security. Time-Based One-Time Password (TOTP) is the most secure method of MFA offered that requires you to either use a password manager that stores TOTP codes or download an authenticator app to store and access these codes.

How to set up MFA?

Setting up Multi-Factor Authentication (MFA) typically involves a few steps to ensure the security of your account. To enable two-factor authentication on the ePayment portal, follow these steps:

  1. Open the ePayments screen in CORE from the side menu > Settings.
  2. In your BQE ePayments profile, click Manage Account on the top-right to launch the BQE ePayments merchant portal.
  3. After you have logged in to the ePayments merchant portal, you will be directed to setting up MFA. Click Continue.

    A screenshot of a login page

Description automatically generated

  4. Based on the level of access, you will be presented with two methods. Select the Authentication Method that you prefer. 

    A screenshot of a login page

Description automatically generated

    • Authenticator App: If you don’t have the Authenticator App installed on your phone, download it from the App Store. Some of the most popular apps are Google Authenticator, Microsoft Authenticator, and Authy. 
    • Text Message: You receive your verification code as a text message (SMS). You can click Modify to change the phone number.
  5. After your phone number is registered, depending on your selected method, you can take the next step.
  6. If you have chosen SMS as your preferred method, you will receive a one-time code on your mobile number. Enter the verification code and continue.

    A screenshot of a computer

Description automatically generated

  7. For Authenticator App, it generates a QR code and asks you to use your Authenticator App to scan the QR code. 

    QR code.png

  8. Next, you will get a successful enrollment message, click continue.
  9. Toggle the Remember Me option and then enter the authenticator app code to proceed with the login process.

After enrolling in Multi-Factor Authentication (MFA) and attempting an additional login to the ePayments portal, you will be prompted to enter the current temporary authenticator code. However, you have the option to simplify future logins by toggling the option, Remember Me. This ensures that you won't be prompted to enter a temporary authenticator code for MFA during subsequent logins within the next 30 days. This functionality streamlines the login experience while maintaining the security provided by MFA.