Simple MFA
Two-factor authentication for BigCommerce — no theme code required
Simple MFA is a BigCommerce Marketplace app that adds TOTP two-factor authentication and passwordless login to Stencil storefronts. Merchants install once via Script Manager and their customers get a secure, branded login experience. No custom development. No theme modifications.
The app is in early access. I am actively looking for BigCommerce agencies, resellers, and merchants with enterprise accounts to partner with ahead of a public launch. If you work with BigCommerce clients who need tighter account security, I would like to talk.
The problem it solves
BigCommerce does not offer native two-factor authentication for customer accounts. For merchants running B2B stores, trade portals, or any store where customers hold pricing, order history, or account credit — that is a meaningful security gap.
Simple MFA fills that gap without requiring a developer to modify the theme. The entire authentication flow is handled through a hosted, branded login page that sits in front of the native BigCommerce account area.
How it works
01
Install from the Marketplace
Install Simple MFA from the BigCommerce App Marketplace. No code changes. No developer needed.
02
Add one script tag
Add a single script via BigCommerce Script Manager. This redirects login traffic to the Simple MFA hosted login page.
03
Customers migrate automatically
Existing customers are migrated via magic link on first login. No manual data import. No disruption to the shopping experience.
What's included
Authentication
- TOTP two-factor authentication (Google Authenticator, Authy, 1Password)
- Passwordless login via magic link
- Passwords hashed with PBKDF2-SHA256
- Password complexity and expiry rules
Security infrastructure
- Rate limiting and IP throttling via Cloudflare
- Authentication logging with IP address tracking
- Automatic customer migration — no manual data handling
Merchant controls
- Custom branding on the hosted login page
- Admin dashboard for user management
- Enable/disable 2FA enforcement per store
Installation
- No theme code changes required
- Works with all Stencil themes
- Single script tag via Script Manager
- Live in under 30 minutes
Pricing
Billing is based on active credentialled customers from the previous month. The free tier is designed for smaller stores or merchants who want to evaluate the product before committing.
Free
£0
Up to 200 credentialled customers
- ✓ Full TOTP 2FA
- ✓ Passwordless login
- ✓ Automatic customer migration
Standard
$12
per 100 additional customers/month
- ✓ Everything in Free
- ✓ Custom branding
- ✓ Authentication logging
- ✓ 10% discount for annual billing
Enterprise
Custom
10,000+ credentialled customers
- ✓ Everything in Standard
- ✓ Volume pricing
- ✓ Priority support
- ✓ Custom SLA available
Looking for agency and reseller partners
Simple MFA is in early access ahead of a public BigCommerce Marketplace listing. I am looking for BigCommerce agencies and resellers who work with merchants where account security matters — B2B, trade portals, wholesale. If that describes your client base, I would like to talk about what a partnership arrangement could look like.
Get in touch about partnering →How it's built
Simple MFA is built on the same Cloudflare-first stack I use across all my products. The hosted login layer runs on Cloudflare Workers, giving it global low-latency performance and the ability to apply rate limiting and IP throttling at the edge — before a request ever touches the application.
Interested in Simple MFA for your clients?
Whether you are a BigCommerce agency, a reseller, or a merchant who wants early access, get in touch. I am actively looking for the right partners to work with ahead of the public launch.
