上次更新时间:2025年9月22日 11:26
Learn why setting up individual Toast Web accounts is an important step to enhance security, and how you can transition to individual accounts per user.
If a shared Toast Web account has access to the 8.1 Financial Accounts or 8.7 Instant Deposits permissions, then multi-factor authentication (MFA) is required to keep your account secure. This makes it challenging to continue sharing an account because the authentication code will go to one person's device, regardless of who is signing in. There are two options to remedy this situation:
To separate a shared Toast Web login, follow these steps:
Toast Web requires multi-factor authentication (MFA) for users with financial privileges (8.1 Financial Accounts or 8.7 Instant Deposits). By making MFA mandatory for these users, we’re protecting the credentials (email address and password) for people who have access to money movement, just like any other financial institution. Depending on the size of your business, these users could be accountants, managers, or even owners - people who have high levels of access because of their function.
Shared accounts are those with a single set of credentials used by multiple people to log in to Toast. While this may have been a convenient way to grant access to your restaurant in the past, with Toast’s mandatory MFA policy, sharing accounts introduces several challenges and security risks:
For this reason, the best way to make logging in easier again is to transition to individual Toast Web accounts for each user. By transitioning from shared accounts to individual accounts, you enhance security, streamline access, and reduce the risks associated with shared credentials.
The benefits of individual Toast Web accounts include:
To learn more about keeping your Toast account secure, see this Toast Central article: .
Unfortunately, you cannot turn off MFA if you have high-level financial permissions. Similar to your bank, Toast is doing this to ensure the financial safety of all our customers from bad actors.
If the financial privileges are removed from a Toast Web account, MFA can be disabled.
At the very least, Toast highly recommends creating individual accounts for those users who continue to need access to sensitive information. A shared account without access to financial permissions may continue to be used for the time being if it’s set up with more basic access (subject to change).