Amazon
Amazon User Permissions needs a Professional plan and a brand-new email
Amazon Seller Central has User Permissions — add a secondary user and they log in with their own credentials and their own 2-step verification. Two conditions catch people out: it requires a Professional selling plan, and the invited user needs an email address that has never been used on Amazon.
Try User Permissions (primary user / secondary users) first
Where this works, it is better than anything we offer: each person gets their own login, their own 2FA and their own audit trail.
- What it is called
- User Permissions (primary user / secondary users)
- Where to find it
- Seller Central → Settings → User Permissions
- Limits
- Professional selling plan only. The invited user needs an email address never previously used on Amazon, their own login and their own 2-step verification.
Where that runs out
On the Individual plan there is no secondary user at all. And the never-used-email requirement blocks the common case of a VA who already has a personal Amazon account on the address you were about to invite.
What Pair2FA does about it
1. Add the authenticator secret once
Seller Central → Login Settings → Two-Step Verification (2SV) Settings → Add a new app, then choose "Can't scan the barcode?" to reveal the Base32 secret.
2. It is encrypted before it is stored
AES-256-GCM at rest. The secret is never shown again unless someone with export permission explicitly asks for it and re-authenticates.
3. Grant only the people who need it
Viewers see the rotating six-digit code and nothing else. Access is per account, so someone working on one client never sees another. Revoking takes one click and is written to the audit log.
Amazon Seller Central team access: common questions
Does Amazon Seller Central support multiple users?
Yes, through User Permissions, on the Professional selling plan. Each secondary user signs in with their own credentials and sets up their own 2-step verification.
My VA's email is already registered with Amazon. What now?
Amazon requires an address not previously used on Amazon for a secondary user invitation. In practice that means your VA creates a new address solely for your store — which most will do, but it is friction worth knowing about before you start.
Is the Individual plan really excluded?
User Permissions is documented as a Professional plan feature. If you are on Individual and need an assistant, upgrading is the clean answer; Pair2FA is the option if the plan cost is not yet justified.
What Pair2FA is not. It is not end-to-end encrypted. Secrets are decrypted on our server to generate codes, so a server compromise is part of the threat model. It is built to replace codes forwarded over chat and photographed QR codes, not to replace a hardware security key or a platform's own access controls. Our security page sets out the full threat model.