Your shop holds customer chats, orders and payouts, so Buvvo does not rely on a password alone. There is no switch to turn on: every sign-in already needs a one-time code, for you and for every teammate.
Choose where your codes go
- Open Account → Settings and find “Where we send your sign-in codes”.
- Pick Email or WhatsApp. Codes go to your email by default.
- Save. The next sign-in uses the channel you picked.
WhatsApp is only selectable once you have added a sign-in number to your profile.
The rest of the protection
- Sensitive changes ask for a fresh code even while you are signed in. Changing your payout bank account is one of them, so a borrowed laptop cannot redirect your money.
- Every session is tied to the device and network it was created on, and expires on its own. A stolen session cannot be replayed elsewhere.
- Roles limit the blast radius: only the Owner can reach billing, settings and the team.
- Traffic to Buvvo runs over HTTPS, and every sensitive action is written to an audit trail.
Keep the email address on your account current. It is where your codes land, and it is how we reach you if something looks wrong.