Protect BigCommerce customer accounts with password + TOTP two-factor authentication. Simple, guided setup.

Simple MFA replaces BigCommerce's native login with a secure, hosted authentication flow. Customers sign in with a password and a one-time code from any authenticator app (Google Authenticator, Authy, 1Password), with backup codes available if they lose access to their device.

Setup takes minutes - the storefront script installs automatically, then you paste two short snippets into your theme. No developer agency required.

New customers register in one step, setting a password and optionally enrolling MFA right on the hosted page before they're signed in. Existing store customers are guided to claim their account and set a password on their first sign-in.

Merchants can enforce MFA store-wide (disabled, optional, or required), manage customer credentials from the BC admin panel, and allow customers to trust their device for 30 days to reduce friction on repeat visits.

Running BigCommerce B2B Edition? Simple MFA supports it too. The buyer portal's login and registration route through the same secure flow, protecting business and personal accounts alike - including company sign-up, where the business is registered and MFA enrolled in one guided step.

Pricing is based on registered customers - the first 200 are free, with transparent metered billing at $12 per 100 customers beyond that.