Multi-factor authentication (MFA) is an extra security step you complete when you sign in, in addition to your password. MFA is required for all Merchant Manager users starting October 26, 2026. Use these instructions to add a virtual authenticator as an MFA method.
You will need to download and install a time-based virtual authenticator.
The recommended mobile authenticator is the Google Authenticator for Android or iOS. See this Google Support page for more help installing Google Authenticator.
A virtual authenticator is a phone app that generates a time-based 6-digit code. Enter that code along with your password when you sign in.
Click on the down arrow at the top right of the page, then click User Profile.
In the left-hand side menu, select Security. In the Virtual Authenticator section of the page, click Update.
Click Add Virtual Authenticator in the pop-up window to confirm.
A QR code for you to scan with your phone will be displayed on the screen. You may also add the secret key manually if your virtual authenticator supports it.
Notice
This QR Code and Secret key are only displayed once. When you leave this page, they will no longer be available.
If you do not complete the setup on your mobile device, you will not be able to log in.
After you scan the QR code with your phone, it should display a 6-digit code for you to enter in the Virtual Authenticator section. Enter the 6-digit code displayed and click Complete.
You will see the status change from Inactive to Active, and it will show the date/time the authentication method was added.
To add a virtual authenticator to your Qualpay user account, you must enter a 6-digit code from your virtual authenticator in addition to your user login and password when you log in to the Qualpay site. How often you are required to enter the authentication code at login can be changed on the user profile Security page.