Changelog

Two-factor sign-in for the dashboard

You can now protect dashboard sign-in with two-factor authentication using an authenticator app. Requests for two-factor codes are rate limited.

API key mode must match your account

Atlas now rejects requests where the API key's mode doesn't match your account's mode:

• a test key on an account in live mode, or
• a live key on an account in test mode.

The API returns 401 with a message telling you which key to use.

What you need to do

Use test keys while your account is in test mode, and switch to live keys when it goes live. See the authentication guide.

Security improvements

We made security improvements to the Atlas API. No action is needed.

Settlements in the dashboard

• Settlements: a list of your settlements, and a details page with the transactions in each one.
• Card transactions: a page for card payments, with receipts.
• Compliance: setup is now split into steps, sections that need your attention are flagged, and you can add your bank details.

See the settlement guide.

Merchant agreement and account status in the dashboard

• Review and accept the merchant agreement from the dashboard.
• A set-password page completes account setup.
• If your business is deactivated, the dashboard now says so instead of failing to load.
• Transactions show a notice when stamp duty applies.