Signing in and keeping your account secure
You sign in with the email on your account, your password, and a code from an authenticator app. Two-factor authentication is required and cannot be turned off.
Before you start
Install an authenticator app on your phone or password manager before you create or open an account. Examples include Google Authenticator or 1Password. You need that app every time you sign in.
Your email
Your email address is your sign-in identity. It cannot be changed in the portal. Open My account to view it. If you need a different email, contact support and quote the address you use today.
Change your password
- Open My account.
- Under Password & security, select Change password.
- Enter your current password and a new password.
Your new password must be at least 8 characters and contain an uppercase letter, a lowercase letter and a number. Use a strong password that you do not reuse elsewhere.
Changing your password can sign you out of other sessions so you need to sign in again.
If you have forgotten your password, use the password-reset link on the sign-in screen. A reset code is sent to your account email.
Two-factor authentication
Every CashSouk account requires authenticator-app two-factor authentication (2FA). My account shows Two-factor authentication (2FA) as required. The page says 2FA cannot be turned off. You set up or manage the authenticator during sign-in.
When you sign in, enter the current 6-digit code from the authenticator you enrolled. Keep a backup of that authenticator (for example a device backup or a password manager) so you are less likely to lose access.
Recent sign-ins
My account lists Recent sign-ins. Each entry can show the device, IP address and time. Review this list if you notice unusual access. If something looks wrong, change your password and contact support.
If you cannot sign in
If you lose your phone, uninstall the authenticator, or cannot produce a valid code, you cannot finish sign-in. There is no in-portal control to reset 2FA yourself.
Email support@cashsouk.my or use the portal chat launcher if you can still open a signed-in session on another device. Include:
- the email address on the account
- what happens at sign-in (password rejected, authenticator code rejected, or you are locked out)
- whether you still have access to the account email
The CashSouk team can help you enrol a new authenticator after they verify the request. 2FA stays required. They are not turning it off for your account.
Common questions
Do I need the authenticator every time I sign in?
Yes. Enter the current 6-digit code from the authenticator you enrolled. CashSouk does not use SMS codes for sign-in 2FA.
I lost my authenticator. What should I do?
Email support@cashsouk.my. Include the account email and that you cannot produce a valid code. The CashSouk team can help you enrol a new authenticator after they verify the request.
What should I do if I see a sign-in I do not recognise?
Change your password, review Recent sign-ins, and contact support with the time and device shown.
Can I change my email in the portal?
No. Email addresses cannot be changed in the portal. Contact support if you need to update the email on the account.