Table of Contents |
---|
...
UltraCart is a Level 1 PCI Compliant Provider, which means our service is constantly tested to ensure we adhere to a rigorous protocol designed to protect the security and integrity of your store data. PCI compliant Security measures are stringent and are of the utmost importance to you and your customers. Let's review the login process in details to better understand how to minimize login issues.
Logging into your account:
The Primary login button is at the top right-hand side of the UltraCart Home Page (www.ultracart.com) and is Titled "LOGIN" as shown below.
Dedicated Login URL
Clicking the login button will redirect you to: https://secure.ultracart.com/merchant/login.do
Info | ||
---|---|---|
| ||
You can bookmark this page to jump straight to the login page. |
Login Credentials:
There are four login credentials, three of which are required. The fourth is optional buy highly recommended. They are:
- Merchant ID (required)
- Login (required)
- Password (required)
- Secure Code (optional) Learn More --> UltraSecure OTP TokensUltraSecure OTP Tokens
Details about the login credentials:
MERCHANT ID
- The Merchant ID is the account ID that chosen upon the creation of the account and cannot be changed.
- The Merchant ID is 5 characters or less and is comprised of letters and numbers only.
- All users on your account will enter the Merchant ID (MID) as the first login credential.
LOGIN
- The Login can be 1-20 characters in length, comprised of letters, numbers and the following special characters: (,!,@,#,$,%,^,&,*,)
- The Login credential is the unique identifier for each user accessing your account and should not be shared.
PASSWORD
- The Password can be 8-25 characters in length, comprised of letters, numbers, and special characters.
- Passwords have a 90 day expiration and may not be used again for 365 days.
Info | ||
---|---|---|
| ||
If you find making up your own passwords to be a royal pain, use this password generator tool to help you create secure passwords: |
ULTRASECURE CODE (optional)
- The UltraSecure Code is a 6 digit number that is generated using the Google Authenticator app, installed on a smart phone device.
- The number changes every 30 seconds. This reduces the likelihood of someone being able to access your account by obtaining your login credentials, short of also having direct access to your phone.
(***Implementing the UltraSecure Code to your login also has the benefit of eliminating the IP Address Activation step during the login process.)
THINGS YOU MAY ENCOUNTER DURING THE LOGIN PROCESS:
- Incorrect credentials
- IP activation prompt
- IP Block
Info | ||
---|---|---|
| ||
In order for the reset to work properly, you must enter the correct MERCHANT ID and LOGIN, otherwise the reset password will not be sent. If you are unsure of your MerchantID & LOGIN, please contact Ultracart Support by calling 209-383-9870 or emailing us at support@ultracart.com. |
Clicking the Reset password button will display the following message at the top of the login screen:
Info | ||
---|---|---|
| ||
|
have UltraCart - Password Reset Request followed by your merchant ID in square braces.
Clicking on the reset password link will trigger a follow up message with the temporary password within.
Responding to an IP Block on your login:
If you encounter a problem logging into your account, an "IP Block" will be applied to your user login upon the 6th failed login attempt. You'll see the following note at the top of the login page:
"Your IP address has been blocked. Please contact UltraCart Support. UltraCart works hard to ensure your shopping cart has the highest availability possible. This includes preventing denial of service attacks. Sometimes this will result in a merchant's IP address being blocked, especially if there is a lot of web activity within a short period. We apologize for the inconvenience. You will receive an automated email that will allow you to unblock your IP. If you still need support, please contact us via email and write 'IP Blocked' in the subject for higher priority routing."
When the IP block occurs, an email notification is sent to the email address on file for the user.
...
Answer: We do not recommend using LastPass due to security flaws in the application. https://it.slashdot.org/story/16/07/27/1342205/lastpass-accounts-can-be-completely-compromised-when-users-visit-sites