Sign-in & security

Getting into your store’s admin should be simple for you and hard for anyone else. CIQRA does that with a two-step sign-in: your password and a second factor, entered on a dedicated CIQRA identity page. This overview explains how that works and how to keep your account secure.

Staff sign in through a secure, two-step flow:

Password — something you know.
Two-step verification (2FA) code — something you have, usually a code from an authenticator app.

Both are entered on the CIQRA identity page, never on the store itself. Keeping credentials on a single, dedicated identity page — and logging every access — is what keeps your admin protected. For the step-by-step version, see Create your account & sign in.

Your store’s data stays yours

CIQRA runs many stores on one platform, but each store is fully isolated: every query is scoped by row-level security to a single store, so one store can never see another’s catalog, orders or customers.

CIQRA is multi-tenant: row-level security scopes every query to one store, so your catalog, orders and customers are never visible to anyone else.

Keeping your account secure

Enter credentials only on the CIQRA identity page. If a storefront page ever asks for your CIQRA admin password, treat it as suspicious — that isn’t part of the sign-in flow.
Keep your 2FA device to yourself. Your authenticator codes are personal to your account; don’t share them.
Give each teammate their own sign-in. Individual accounts mean access can be scoped and traced per person — see Staff roles & permissions.

If you lose your two-step device

For security, 2FA codes can’t be bypassed — there’s no back door, which is the point. If you lose the device with your authenticator:

Recover access through your workspace owner, or
Contact CIQRA support to help restore your sign-in.

Because 2FA recovery can’t be resolved by resetting a password alone, reach out early rather than retrying. For a fuller checklist, see I can’t sign in to my admin.

Was this page helpful?