Two-Factor Authentication (2FA) should be used to better protect user accounts. When enabled, users must provide an SMS capable phone number to receive authentication codes. Users must authenticate any new devices or browsers used to access GCPay by entering the authentication code sent to their phone.
GCPay strongly suggests that 2FA be enabled for all accounts. Users can enable Two-Factor Authentication by navigating to Settings > Users and selecting their profile. Then click Setup Two-Factor Authentication and follow the prompts.