Two-factor is required on accounts that have it enabled.
Lost your device? Use a recovery code — each one works once.
No account yet? Start the trial
A forged signal is a funded account wiped. That is why every response your terminal receives is signed, and why the connector verifies it before it executes anything.