Sign in with Google
Your Team Signs in with Google, Never Past Two-Step
One less password for your team to remember. CONTINUE WITH GOOGLE signs them in to your admin and the phone app with the Google account of their email, and two-step sign-in still asks for its code after it.
- No fee on your orders, on every plan
- Free for 14 days
Kosha is a demo store on Mercayo. Its products, orders and customers are sample data.
In short
What It Does
CONTINUE WITH GOOGLE is on the admin's sign-in page, in the phone app and on staff invitations. It is an extra way in, never a new one:
- Matched by the email Google confirms. The first time, Mercayo finds the account whose email Google has confirmed belongs to the person, and links that Google account to it. After that the same Google account signs them in even if its email changes. An email Google has not confirmed is never used.
- No surprise accounts. Google never makes an account from the sign-in page. An email with no account is told so, with SIGN UP WITH GOOGLE offered to start a store.
- Sign up with Google. On Create Your Store, Google confirms the owner's email, so there is no code to type; the rest of sign-up (the store's name, address, kind and the terms) is as before.
- Invitations. A person you invite presses CONTINUE WITH GOOGLE on the invitation: without an account, one is made and they join your store at once.
- Two-step sign-in still applies. Google replaces the password step only. Anyone who set up two-step sign-in, or whose store requires it, gives the code after Google.
- Each person's own page. Sign-in security in the account menu shows the linked Google account and the last Google sign-ins, with LINK GOOGLE and UNLINK. An account made with Google sets a password before it can unlink, so nobody is left without a way in.
Your Store Decides
Sign in with Google is a switch in Settings → Sign-In and Security, on to start with. Switch it off and your team's Google sign-ins in your store end within seconds; they sign in with their email and password, and their other stores are not affected. Every Google sign-in, link and unlink of your team is in your Activity Log.
For your store
Why It Matters
Your team already has Google accounts on their phones and laptops. Signing in with one tap is quicker than typing a password at a packing table, and there is one less password to reuse, forget or write on a sticky note.
It is safe because Google only proves who the person is: the account, the stores and the rights stay yours. Google never opens a door that did not exist, an email Google has not confirmed opens nothing, and two-step sign-in still stands behind it for owners and admins. If you would rather your team used passwords only, one switch turns it off for your store.
Step by step
How It Works
Press CONTINUE WITH GOOGLE
On the admin's sign-in page or in the phone app, the person presses CONTINUE WITH GOOGLE and chooses their Google account on Google's own page. Mercayo never sees their Google password.
Matched to Their Account
Mercayo finds the account whose email Google has confirmed and links the Google account to it. With two-step sign-in, the code step comes next; then they are in their store.
Or Link It from the Account Page
Someone whose Google email differs from their sign-in email opens Sign-in security in the account menu and presses LINK GOOGLE. From then on that Google account signs them in.
Choose for Your Store
In Settings → Sign-In and Security, keep Sign in with Google on, or switch it off so your team signs in with a password only. Save, and it applies at once.
Settings
Settings You Control
All are under Settings → Sign-In and Security → Two-Step Sign-In.
Mercayo
Mercayo's Controls
Mercayo can force Sign in with Google on or off for your store, with a reason your admin shows, and has one switch that stops Google sign-ins for every store at once; every change is in Mercayo's audit log. A white-label store's own admin address never shows the button, because Google's page would name Mercayo. Mercayo's own team may sign in with Google too, and always gives its two-step code after it.
Limits today
Good to Know Before You Start
- Google only: no Apple or Microsoft sign-in yet.
- Never shown on a white-label store's own admin address; its team signs in with email and password there.
- A password-reset code emailed just before a Google sign-in stops working; ask for a new one.
Questions
About Sign in with Google
Does Google skip two-step sign-in?
No. Google replaces the password step only. Anyone who has set up two-step sign-in, or whose role in a store requires it, gives the 6-digit code after Google, exactly as after a password.
Can a stranger's Google account get into my store?
No. A Google account signs someone in only when Google has confirmed its email is that person's account email, or when the person linked it themselves while signed in. Google never makes an account from the sign-in page, and an email Google has not confirmed is never used.
What if I switch it off for my store?
Your team's Google sign-ins in your store end within seconds, and the admin asks them to sign in with their email and password. Their other stores are not affected, and they can switch back the moment you turn it on again.
Does it work in the phone app?
Yes. CONTINUE WITH GOOGLE is on the app's sign-in screen; Google's page opens inside the app and brings them back signed in.
Can someone unlink Google and be locked out?
No. An account made with Google must set a password before it can unlink Google, right on the same card, so there is always a way in.
Related
Related Features
- Two-Step Sign-InYour team signs in with a password and a code from an authenticator app, with recovery codes, and you choose who must use it.
- Staff and RolesInvite people by email or phone, give them roles with exactly the rights they need, switch access off at once, and hand over ownership safely.
- Activity LogEvery change your team makes to products, orders, prices, settings and more is written down by the database, in plain sentences, with filters and a CSV export.
More in Security and Trust: Store Isolation | Staff and Roles | Two-Step Sign-In | Activity Log | Support Access | Encrypted Keys | Privacy and Consent
