More flexible two-factor authentication and account security
We've updated the OpenPath Account and Client portals to make two-factor authentication easier to set up, use, and recover. The release also brings clearer contact verification and a more consistent sign-in experience.
Choose how you verify your sign-in
In the Account portal, go to Account → Two-factor authentication to manage your preferred verification method: email, text message, or an authenticator app. Your preference is shared with the Client portal.
- Confirm a new method before it becomes your saved preference.
- Set up an authenticator app by scanning a QR code or entering the setup key manually.
- Use another available verification method from the sign-in screen when needed.
Remember two-factor verification for 30 days
Remember me for 30 days remembers the two-factor check in that browser. You'll still need your password when signing in again after closing the browser or signing out.
Sign out now behaves consistently in both portals: it ends your active session while keeping valid two-factor trust until its original expiry. Signing out does not restart or extend the 30-day period, and completing a normal two-factor sign-in in one portal does not cancel the other portal's trust.
Password changes and changes to your two-factor setup still revoke remembered trust. You can also use Forget this browser in your two-factor settings.
Save your recovery codes and continue with confidence
After setting up an authenticator app or generating replacement recovery codes, you'll see a clearer code grid, a Copy all codes action, and a Continue to two-factor settings button.
Recovery codes are single-use and can help you regain access if your authenticator app is unavailable. Copy and store them somewhere private and secure when they are shown.
Verify contact details from your profile
The Account portal's Profile page now clearly shows both email and phone verification status, with Verify or Reverify actions available there.
- Verify a new phone number before it replaces your current number.
- Enter text-message codes directly in the page, without an overlay blocking the field.
- Reopen a pending code entry after a reload without requesting another text.
- See clearer feedback for delivery, invalid codes, expired requests, and resending.
Saved contact verification is shared across the Account and Client portals and persists after a reload.
A clearer experience across both portals
Sign-in, two-factor verification, password recovery, contact confirmation, and session-ended pages now use consistent layouts, including mobile and light/dark themes. Help and social links sit outside the form cards, and two-factor screens separate Verify, Resend code, and alternate-method actions.
The Account portal's user menu now includes Account and Sign out, matching the Client portal. The Client merchant chooser keeps long lists within a scrolling section and opens a merchant account directly when selected.
These improvements are available in the Account portal and Client portal.