We’ve made two changes to how you sign in to PushEngage. Two-factor authentication (2FA) is now required on every account. And when you log in with your email and password, you’ll also enter a one-time passcode (OTP) to finish signing in.
Here’s why we made the change, what’s different, and what to do the next time you log in.
Why we’re strengthening account sign-in now
The way online attacks work is changing fast. AI tools have made it cheap and quick to:
- Write convincing phishing emails that copy a brand’s tone, layout and timing.
- Guess passwords at scale by trying common patterns across thousands of accounts at once.
- Reuse leaked passwords from other websites against every service a person might use, in minutes instead of weeks.
These attacks aren’t aimed at any one company. They go after the weakest part of any login: a password that’s been reused, guessed or phished somewhere else. That’s why businesses everywhere are adding extra steps to sign-in, and why we’re making those steps standard for every PushEngage customer.
What’s changing when you log in
1. Two-factor authentication is required on every account
2FA adds a second step after your password, so you confirm it’s really you before you get in. It’s now required for everyone, so every PushEngage account gets the same protection.
2. A one-time passcode for email and password logins
If you sign in with your email and password, you’ll also be asked for a one-time passcode to finish logging in. Each code works for a single sign-in and expires shortly after it’s issued, so a code that’s already been used is no help to anyone else.
What this means for your account
Your PushEngage account holds a lot: your subscriber lists, your campaigns and automations, and the settings for every site you’ve connected. With 2FA and OTP in place, a password on its own is no longer enough to get in.
So even if a password you’ve used somewhere else ends up in the wrong hands, access to your account stays with you and your team.
What you need to do
Nothing right now. The next time you log in to PushEngage, you’ll see a prompt at the top of your dashboard. Click Set up 2FA and follow the on-screen steps.
Two habits that make your account even harder to get into:
- Use a unique password for PushEngage, one you don’t use on any other website. A password manager makes this easy.
- Keep your one-time passcodes to yourself. Don’t share a code with anyone, even if the request looks like it comes from someone you know.
Need help getting set up?
If something doesn’t work as expected, or you’d like a hand getting set up, contact our support team. Our team will walk you through it.
Thanks for trusting PushEngage with your audience. We’ll keep improving how we protect your account as new threats appear.
