Set Up One-Time Password Verification for Enhanced Access

One-time password (OTP), also known as enhanced access, is a security process that prompts a user for a six-digit code sent to a verified phone number. This happens after a user is already logged in to Toast Web, and is visiting a page that contains sensitive information.

In this Article:

• One-Time Password and Account Security
• Verify Mobile Phone Number for Enhanced Access
• Opt Out of One-Time Password Verification 
• Add a Mobile Phone Number to My Account
• "Invalid" Phone Number

One-Time Password and Account Security

As part of Toast's ongoing efforts to improve security for our customers, we ask that all users add and verify mobile phone numbers for their accounts. When accessing pages in Toast Web with sensitive information (referred to as "enhanced access"), you may be prompted to enter a one-time password sent via SMS to your mobile phone before you can view the information. This adds a layer of protection for sensitive operations. 

Note that this enhanced access security measure is not the same thing as multi-factor authentication (MFA). MFA is a security method that prompts you for a second verification method when you are logging in to Toast Web with your email address and password. To learn more about MFA, see these Toast Central articles: 

• Set Up Multi-Factor Authentication
• Protect Your Toast Account From Scammers
   

 Back to top

Verify Mobile Phone Number for Enhanced Access

Once a user sets up and activates their account, they will be prompted to sign in to Toast Web with their newly created login credentials and verify their mobile phone number.

1. The user will enter their mobile phone number and select Verify. At this time, only phone numbers with U.S., Canada, Ireland, or U.K area codes are supported for enhanced access setup. 
2. The user will receive an SMS text message with a 6-digit verification code. 
   1. If the mobile number needs to be updated, select Update my phone number.
   2. If the 6-digit verification code needs to be resent, select Resend code. 
3. Once the 6-digit code is entered successfully, a confirmation message will appear stating the phone number has been verified. 

It's important to note that the verified phone number must be unique per user. That means if you've used your number on an older Toast Web account, it needs to be removed there first. Note that if you have more than one Toast Web account, these can be consolidated so that you can access everything from a single login. Sometimes, entering a phone number that has already been linked to an account can result in an invalid format error. For more information on how to consolidate Toast Web accounts or remove a phone number from a previous account, check out this Toast Central article: .

Opt Out of One-Time Password Verification 

After user activation and logging into Toast Web for the first time, the option to opt out of enhanced access via one-time password verification will appear. 

Note: If you opt out of one-time password verification, you won't be able to view or edit data on secured pages. 

Add a Mobile Phone Number to My Account 

If you choose to add a mobile phone number at a later date, the phone number can be added by selecting their name in the top-right corner of the page, and then navigating to My account.

Here, in the Enhanced access section, you can add and verify your mobile phone number.

"Invalid" Phone Number

If you've entered your number and see an error message claiming the number is invalid, double-check to make sure you've entered the phone number correctly. If you have, please start a chat with Customer Support.