Summary

Tradeshift Go virtual cards backed by American Express (AMEX) utilize two factor authentication for a more secure spend management process.

What is Two Factor Authentication (2FA)

What is 2FA? 2FA or Two Factor Authentication is a solution where two distinct factors are used to authenticate a user before they can access the product in question. The first factor is the knowledge factor which is tied to a user’s username and password.

The second factor is tied to the possession factor in that the user has to be in possession of the device where the one time pin code is generated to be entered and successfully validated before the user can be authenticated and gain access to the product in question.

The more secure method supporting the second factor is where the user is using an authenticator app which generates the pin code required to be entered as part of the authentication process.

The Tradeshift 2FA solution is based on Amazon’s Cognito service and supports:

• A variety of authenticator apps to generate the one time code used to authenticate the user upon login to Go.

Frequently Asked Questions

What is 2FA?

2FA or Two Factor Authentication is a solution where two distinct factors are used to authenticate a user before they can access the product in question. The first factor is the knowledge factor which is tied to a user’s username and password.

The second factor is a one-time code generated on a device you possess, which you must enter and validate to gain access.

Why does Tradehift Go require 2FA?

There are a number of benefits associated with using 2FA to authenticate users. The main and primary benefit is that it will make your account more secure as it is much harder for malicious users to gain access to your account.

When will 2FA be required to access Go?

2FA was implemented on March 30, 2025 and is required in order to access your Go account.

What will happen if I don’t set up 2FA by March 30, 2025?

If you haven’t set up 2FA, no problem. The first time you try to access your account you will be prompted to set it up. It should take no longer than a few minutes.

Do I need to reset my password as part of activating my 2FA?

No, 2FA is just an additional verification method on top of the username and password you already have established.

Do I need to use 2FA every time I log in?

Yes, for maximum security, Tradeshift Go requires 2FA every time you log in unless your company has enabled SSO. This ensures that only you can access your account, protecting your sensitive financial information.

What happens if I lose or get a new phone?

If you lose or replace your phone, you will need to reset 2FA for any accounts linked to it. However, you can transfer your 2FA settings to a new device without resetting everything. If you're using Google Authenticator, for example, you can manually transfer your 2FA details by disabling it on your account, re-enabling it, and then setting it up again on your new device using the same key or QR code. Otherwise, please contact the Go support team for 2FA reset assistance.

Can I opt out of 2FA?

No, 2FA is a mandatory requirement for all users. This is to ensure the highest level of security for your account.

What phone number should I use for 2FA enrollment?

Please use your primary (mobile) phone number, the one you will most likely have access to for receiving authentication codes.

Is there a cost associated with using 2FA?

There is no cost involved, as using an authenticator app for 2FA is free.

Which authenticator apps can I use?

You can use any standard authenticator app to generate one-time passcodes for secure login. We recommend the following apps:

• Google Authenticator (iOS) | Google Authenticator (Android)

• Microsoft Authenticator (iOS) | Microsoft Authenticator (Android)

• Authy (iOS) | Authy (Android)

How to set up your authenticator app:

1. Install the authenticator app of your choice on your mobile phone.

2. Open the app and follow the setup instructions.

3. On our Go login page, scan the QR code provided to link your account.

4. Enter the generated code to complete the setup.

Once set up, your authenticator app will generate secure codes each time you log in.