We recommend that everyone using Offset Commerce has their own individual login and sets up 2FA to protect it. Individual logins tie every action to a specific person, and 2FA keeps your account protected even if a password is shared, guessed, or leaked.
That said, some tasting rooms have multiple teammates sharing a single login since staff are often sharing the same iPad to use our POS app, and sometimes the same laptop to access Offset Commerce. This article explains how to set up 2FA for a shared login.
How it works
Apple devices have a built-in app called Passwords that can generate 2FA codes. You save the shared login in Passwords along with its 2FA code, and anyone who can unlock the device can get the code. If your iPad and computer are signed into the same Apple Account, the login and codes sync between them, so you only set this up once.
What you’ll need
An iPad running iPadOS 15 or later.
A Mac running macOS 12 or later, if your team also signs in to Offset Commerce on a shared computer. The Passwords app is only available on Apple devices.
A dedicated Apple Account for your tasting room devices (recommended, more on this below).
Set up 2FA for the shared login
On the iPad, open the Passwords app and add a new entry with the shared account’s email and password.
Sign in to Offset Commerce with the shared account and go to Team members > Your Profile. Turn on 2FA using an authenticator app and copy the setup key.
Back in the Passwords entry on the iPad, tap Set Up Verification Code and paste in the setup key.
Copy the 6-digit code from Passwords and paste it into Offset Commerce to finish setup.
Signing in to the Offset POS app
Open Passwords, tap the Offset entry, and copy the code. Switch back to the POS app and paste it in. Codes refresh every 30 seconds, so there’s plenty of time.
Signing in to Offset Commerce on a shared Mac
If the Mac is signed into the same Apple Account as the iPad with iCloud Passwords turned on, the Offset entry appears in Passwords on the Mac automatically. In Safari, the code fills in for you right after the password. If your team uses Chrome, install Apple’s iCloud Passwords extension to get the same autofill.
If the Mac uses a different Apple Account, open the Passwords app on the Mac, add the shared login, choose Edit, and set up a verification code by pasting in the same setup key.
Things to keep in mind
Sign-ins stay on your tasting room devices. The 2FA code only lives on devices signed into your tasting room Apple Account, so the shared login only works on those devices. Teammates won’t be able to sign in to Offset Commerce from a personal computer or any other device. If someone needs access elsewhere, set them up with their own login and 2FA.
Use a dedicated Apple Account. Passwords syncs to every device signed into the same Apple Account. If the iPad is signed into someone’s personal Apple Account, the shared login and codes will show up on their personal devices, and their personal passwords may show up on the iPad. A dedicated Apple Account for tasting room devices keeps everything separate.
Save the setup key. Keep it somewhere secure so you can set up codes again if you replace a device.
Use strong device passcodes. The iPad passcode and computer password now protect both the login and the 2FA code, so use ones only your team knows.
On iPadOS 17 or macOS 14 and earlier, you’ll find Passwords in Settings instead of a separate app.
Using a Windows PC?
If your shared computer runs Windows, a password manager that works on both Windows and iPad, such as 1Password or Bitwarden, can store the shared login and generate 2FA codes on both devices.