Signing in and keeping your account secure

Passwords, two-factor authentication, and signing out a device you no longer have.

Your Aplon account holds your revenue, your costs and your customers. It deserves the same care as your Shopify admin.

Two-factor authentication

Two-factor means that even if somebody has your password, they cannot get in without your phone. We strongly recommend turning it on, from Settings.

You will scan a code with an authenticator app such as Google Authenticator, 1Password or Authy, and enter a six-digit code from then on when you sign in.

Save your recovery codes somewhere safe when you set it up. They are how you get back in if you lose your phone. Do not keep them only on the phone itself.

Signing in from a new device

The first time you sign in from a device we do not recognise, we send a code to your email address as well. Devices you use regularly do not ask again.

Signing out a device you no longer have

Settings lists the devices signed in to your account. If you have sold a laptop or lost a phone, sign that device out from here. It stops working immediately.

If you think somebody else has your password, change it and sign out every device, in that order.

Using Aplon inside Shopify

If you opened Aplon from your Shopify admin, Shopify is handling the sign-in and there is no separate password to manage. Your Shopify account's own security is what protects it, so two-factor on your Shopify account matters just as much.

What we will never ask you for

We will never ask for your password, your two-factor codes or your recovery codes, by email, in a support ticket, or anywhere else. Nobody at Aplon needs them. If you are ever asked, it is not us.

Still stuck? Send us a message — we reply by email, usually the same day.