BigCommerce protects admin accounts with MFA. Customer accounts get nothing. Simple MFA fixes that, on retail storefronts and B2B Edition buyer portals alike. Setup takes about 15 minutes.
Now live on the BigCommerce App Marketplace. Free for up to 200 customer accounts, no card needed.
How it works
Simple MFA works with the store you already have. Nothing changes on your live storefront until you say so.
Install Simple MFA from the BigCommerce App Marketplace. OAuth handles the permissions, so there are no API keys to set up.
The storefront script installs itself. The admin panel then walks you through a short setup. Two small theme file changes are needed, and we generate the full content for both.
Login links redirect to a hosted login page carrying your branding. Customers set a password on first login and can enrol in TOTP MFA if they want to.
Features
Passwords are hashed with PBKDF2-SHA256, which meets NIST SP 800-63B, and stored entirely separately from BigCommerce.
Customers can enrol any RFC 6238 TOTP app, including Google Authenticator, Authy and 1Password. Backup codes are included.
Existing customers are migrated automatically. A magic link email lets them set a password on first login, so nobody has to re-register.
Upload your logo and set your brand colours. The hosted login page matches your store identity.
Every login attempt is logged with IP address and user agent. View per-customer history and store-wide suspicious activity from the admin panel.
Automatic lockout after repeated failures. Cloudflare-native threat scoring blocks suspicious IPs before they reach your store.
B2B Edition
Simple MFA detects B2B Edition automatically and takes over its authentication routes. Company buyers get the same password and TOTP protection as retail customers. There is nothing extra to configure and no second app to install.
Business sign-ups are captured on your own branded registration page, then provisioned through the BigCommerce B2B API, which creates the company and its admin buyer in a single step.
The buyer portal's sign-in screen is intercepted just like the standard storefront login. Buyers land on your hosted login page and authenticate with a password and TOTP code.
Buyer portal account settings open the Simple MFA account portal, so buyers manage their password, authenticator, backup codes, and trusted devices in one place.
Compatibility
Simple MFA works with any BigCommerce store running a Stencil theme, including Cornerstone, all marketplace themes, and B2B Edition buyer portals.
Pricing
Billing is based on the number of customers with an active account, rather than logins or page views. Start free, upgrade when you outgrow it, cancel any time.
Free
$0
Up to 200 credentialed customers
Standard
$12
per 100 customers / month above free tier
Enterprise
Let's talk
10,000+ customer accounts
Pricing is based on credentialed customers active in the previous calendar month, rather than your total BigCommerce customer count.
Simple MFA is live on the BigCommerce App Marketplace. Install it free and you can be running in about 15 minutes.
Free for up to 200 customer accounts. No card required.