Two-step verification
Two-step verification means signing in takes your password and a six-digit code from an authenticator app on your phone. Someone who learns your password still can't get in.
Turn it on under Account → Two-step verification. Any TOTP app works: Google Authenticator, Microsoft Authenticator, Authy, 1Password, or the built-in Passwords app on iPhone. Scan the QR code (or type the key), enter the six digits it shows, done. From then on you'll be asked for a code after your password.
Who needs it
- Tow company owners and admins — required before you can open payout and bank settings, and strongly recommended everywhere else. Pricing, crew, and your Stripe account sit behind your login.
- Towhub staff — required.
- Customers and drivers — optional. Nothing stops you turning it on.
Lost your phone
Codes only live on the device you enrolled. If it's gone:
- Email support@towhub.co from the email address on the account and say you've lost your authenticator.
- We'll confirm it's you (a reply from that address, plus a detail about the account only you'd know).
- We remove the authenticator. Sign in with your password and set it up again on the new phone.
If you're switching phones on purpose, turn two-step off from the old phone first (Account → Two-step verification → Turn off), then turn it on from the new one.
Turning it off
Account → Two-step verification → Turn off. You'll need to have signed in with a code in the current session; if you haven't, sign out and back in first. Company owners lose access to payout settings until it's on again.