/
Logging Into Your UltraCart Account

Logging Into Your UltraCart Account

Owned by Hunter Schaeffer
Last updated: Jun 18, 2025 by Tyler Johnson

Overview

UltraCart is a Level 1 PCI Compliant Provider, meaning our service undergoes constant testing to ensure adherence to a rigorous protocol designed to protect the security and integrity of your store and customer data. PCI compliant security measures, such as IP blocks, two-factor authentication (2FA), and stringent password requirements, are of utmost importance for both you and your customers. These security measures are in place to safeguard sensitive information and prevent malicious or unauthorized actors from accessing your accounts. This guide provides detailed instructions for logging into your UltraCart account and helps you understand how to minimize potential login issues.

Logging Into Your UltraCart Account

Introduction

UltraCart is a Level 1 PCI Compliant Provider, meaning our service undergoes constant testing to ensure adherence to a rigorous protocol designed to protect the security and integrity of your store and customer data. PCI compliant security measures, such as IP blocks, two-factor authentication (2FA), and stringent password requirements, are of utmost importance for both you and your customers. These security measures are in place to safeguard sensitive information and prevent malicious or unauthorized actors from accessing your accounts. This guide provides detailed instructions for logging into your UltraCart account and helps you understand how to minimize potential login issues.

Prerequisites

Before attempting to log in, ensure you have the following credentials readily available:

  • Merchant ID (MID): This is your account ID, chosen during account creation. It is 5 characters or less, comprised of letters and numbers only, and is not case-sensitive. This ID cannot be changed. All users on your account will use the same Merchant ID.

  • Login: This is your unique identifier for accessing your account. It can be 1-20 characters in length, comprised of letters, numbers, and/or the following special characters: ( , !, @, #, $, %, ^, &, *). The Login is case-sensitive and should not be shared.

  • Password: Your password must be 8-25 characters in length, comprised of letters, numbers, and special characters. It is case-sensitive.

  • UltraSecure Code (Optional but Recommended): This is a 6-digit number generated by the Google Authenticator app (or any 3rd-party 2FA code generator) installed on a smartphone device. The code changes every 60 seconds, significantly reducing the likelihood of unauthorized account access even if your login credentials are compromised. Implementing the UltraSecure Code also eliminates the IP Address Activation step during the login process.

Tip: If you find it difficult to create secure passwords, you can use a password generator tool like http://passwordsgenerator.net/ or a 3rd-party password manager such as OnePassword or Bitwarden to generate or manage your passwords.

Logging into your account:

Accessing the Login Page

You can access the UltraCart login page in two ways:

  1. From the UltraCart Home Page: Click the "Login" button located at the top right-hand side of ultracart.com

  2. Using the Dedicated Login URL: Directly navigate to secure.ultracart.com

We recommend bookmarking the login page for easy access in the future

image-20250618-172625.png

Entering Your Credentials

On the Account Login page, you will enter your Merchant ID, Login, and Password. If you have UltraSecure Code enabled, you will also enter that in the designated field.

image-20250618-172907.png

Forgetting Your Merchant ID, Username, or Password

If you forget your Merchant ID, Username (Login), or Password, you can easily recover or reset them directly from the login page. Simply click on the field you need assistance with, and a prompt will appear to help you recover the information.

Forgot Merchant ID or Username

If you have forgotten your Merchant ID or Login, click the respective link on the login page. You will be presented with an email input. Enter your email address into the field and click "Send". You will receive an email containing the Merchant IDs and Logins associated with that email address.

Forgot Password

If you know your Merchant ID and Login but have forgotten your password, click the "Forgot Password" link on the login page. You will be prompted to enter your Merchant ID and User (Login). Enter these details and click "Send". This will send an email to the address associated with your account with password reset instructions.

Things you may encounter during login:

Invalid Login Specified / Incorrect Credentials

If you enter an incorrect Merchant ID or Login, you will receive an "Invalid login specified. Please try again" error. Double-check your Merchant ID and Login for accuracy, paying attention to case sensitivity for the Login.

IP Activation Prompt

If your IP address is unrecognized after you log in, you will be presented with an additional level of authentication. This prompt ensures the security of your account when accessed from an unfamiliar location.

There are two distinct scenarios for this authentication:

  1. If you have UltraSecure Code (2FA) Enabled: You will be prompted to enter a security code from your Google Authenticator app (or any 3rd-party 2FA code generator). Enter the 6-digit code displayed in your authenticator app into the provided fields and click "Submit Code".

image-20250618-182922.png

  1. If you do NOT have UltraSecure Code (2FA) Enabled: A security code will be sent to the email address on file for your UltraCart account. You will be prompted to enter this code for verification. Check your email inbox (and spam folder) for the code. Enter the received code into the provided fields and click "Submit Code".

Important: Do not close your browser window after the email code is sent. The activation code only works with the current session in this browser window. If you close the window, the code will not work, and you'll have to start the entire process over again.

image-20250618-182833.png


IP Block

Note: If you are connected to a Virtual Private Network (VPN), you will unlikely be able to access UltraCart or its services. Due to the high number of malicious actors and fraud attempts, the UltraCart platform takes an aggressive approach to protect and validate authentic traffic. Due to this, we block the majority of VPN IP Addresses.

If you encounter a problem logging into your account, an "IP Block" will be applied to your user login upon the 6th failed login attempt. You'll see the following note in the login page after the IP block is initiated: "Your IP address has been blocked. An email was sent to the address on file. Use the links in the email to remove the block. Please contact support@ultracart.com or 209-383-9870 for additional help".

UltraCart works hard to ensure your shopping cart has the highest availability possible. This includes preventing denial of service attacks. Sometimes this will result in a merchant's IP address being blocked, especially if there is a lot of web activity within a short period. We apologize for the inconvenience.

Note: Due to security concerns and

  • IP Block Email Notification: You will receive an automated email that will allow you to unblock your IP. When the IP block occurs, an email notification is sent to the email address on file for the user. The email will have a subject of "UltraCart - Your IP has been Blocked" and will come from "support@ultracart.com". This email notification contains two hyperlinks to remove the IP block from your user login:

     

    1. The first one removes the IP block.

    2. The second one removes the IP block AND then triggers a password reset email in a follow up email message.

    These self-service links allow you to immediately respond to an IP block without having to contact support.

Note: If you still need support, please contact us via email and write 'IP Blocked' in the subject for higher priority routing"

Next Steps

  • Learn about UltraSecure OTP Tokens: Setting up UltraSecure Code is highly recommended for improved security and to avoid IP activation prompts.

    • Do you wish to never ever encounter the IP Activation step again and desire to eliminate the need to update your password every 90 days? If so, return to the "Your Preferences" page again and click the "Chain link" icon to the right of the OTP Serial Number field at the "UltraSecure One Time Password" section. There you'll see the 3 step instructions for implementing the UltraSecure One Time Password login process. This is the preferred option for both security and convenience.

  • Troubleshoot Persistent Logout Issues: The login session is determined by a "session" cookie that UltraCart places on the browser upon successfully logging into the account. If the cookie is deleted then you'll be prompted to log in upon the next screen refresh/update. If you are frequently logged out, ensure your browser has session cookies enabled and that you whitelist any cookies from secure.ultracart.com. Also check your security/antivirus software, such as Norton, to ensure that you have whitelisted the UltraCart domain for the firewall and privacy settings. If the steps above do not resolve the issue, then check with your network administrator to see if you are using a proxy server and if so to exclude caching of the domain. Additionally:

    • Please make sure your IP address isn't changing. Some hotels will round robin IP addresses among clients. Check ipchicken.com and refresh a bunch of times across a 5 minute window. See if IP is changing.

 Related Documentation:

UltraSecure OTP Tokens