PayStar “My Account”: security, notifications, and sign-in control

Security, notifications, and activity monitoring

The My Account section is your personal space in PayStar, where all key settings for security, notification channels, and sign-in auditing are collected. It helps your team respond faster to incidents (conversion drops, stuck orders, limits exceeded) and allows each member to manage their profile without unnecessary support requests.

1. What matters for the business

My Account solves several business needs at once:

Risk reduction: password + 2FA protect access to funds and settings.

Faster reactions: notifications help you learn about issues without constantly monitoring the dashboard.

Action audit: sign-in history helps quickly detect suspicious activity.

Team transparency: name and avatar make it easy to identify who performed actions in the system.

2. What you can configure in “My Account”

This section typically includes:

Profile: name, avatar.

Access: password change, 2FA settings.

Notifications: Telegram / custom Endpoint, rules and subscriptions.

Sign-in history: a list of sign-ins with details (date/time, IP, device).

Sign out: end session / switch account.

3. Access security

3.1. Change password

In the personal info block, find the Password field.

Click the pencil icon.

Enter your current password, a new password, and confirm the new password.

Click Save.

3.2. How to make your password strong

We recommend:

a password length of 18+ characters;

using numbers, uppercase/lowercase letters, and special characters;

a unique password for each service.

3.3. Two-factor authentication (2FA)

2FA protects your account even if your password is compromised: without the second factor, sign-in is not possible.

2FA via Telegram

In the 2FA block, enable the Telegram checkbox.

Get a confirmation code and send it to the Telegram bot (as prompted by the UI).

After linking, you will receive the confirmation/code in Telegram during sign-in.

2FA via Google Authenticator

Enable the Google Authenticator checkbox.

Scan the QR code in the app (or add the secret key manually).

Confirm activation in PayStar.

Tip: store the secret key in a password manager in case you change your phone.

Can I enable both 2FA methods?

Yes. If both methods are enabled, you will need to complete both factors sequentially during sign-in.

How to disable 2FA

In My Account, turn off the checkbox for the required factor and confirm the action (if the system asks for confirmation).

If you lost access to Telegram/Authenticator

Contact your team admin or support to restore access and rebind 2FA.

4. Notifications: how not to miss important updates

4.1. Where notifications are delivered

Telegram

Custom Endpoint (HTTP POST to your URL)

4.2. Connect Telegram

Enter your Telegram username in the Telegram field.

If Telegram is not linked yet, complete the linking via bot/confirmation code.

Enable the required notifications using checkboxes.

4.3. Send notifications to your Endpoint

Enter your URL in the Custom Endpoint field.

Make sure your server accepts POST requests and responds reliably (preferably 2xx).

Enable the events/alerts that should be delivered to the Endpoint.

More details about sending events to your Endpoint: https://apidoc.paystar.uk/events

5. What types of notifications exist

5.1. Activity notifications (events)

These are “someone did something / something changed” notifications. They are usually enabled via checkboxes.

Examples by group:

Payments: manual status changes, adjustment transactions, “unknown orders”.

Merchants: merchant changes, endpoint changes, key rotations, flow changes (routing/cascading), channel changes.

Reconciliations: runs in the dashboard/bot.

Fees: fee and rule changes.

Team: team settings changes, user changes, time zone changes.

Limits: creating/deleting limits, limit triggers.

5.2. Flow alerts (rules)

These are configurable notifications: you define the conditions under which PayStar should notify you.

Typical alerts:

Orders Count — change in order volume vs the previous period.

Conversion — change in Created → Success conversion.

Stuck Orders — orders processed longer than the expected time.

Payment Status — notifications for selected statuses/events.

6. How to configure flow alerts

Example: Orders Count

Open the Orders Count block and click Add rule.

Choose the tracking level: merchant / flow / channel.

Set a threshold (e.g., -5% or +5%).

Select the comparison period (day-to-day / hour-to-hour).

Save.

Comparison logic: the system compares the current period with the previous period of the same length and notifies you if the deviation is greater than the configured threshold.

Sign-in history helps you quickly understand who signed in and when.

How to open:

At the bottom of My Account, click Sign-in history.

Review the list (date/time, IP, device).

Use filters if needed.

If you see a suspicious sign-in:

change your password immediately,

enable 2FA,

notify your team admin and/or support.

8. Profile: name and avatar

8.1. Why you need a name and avatar

Your teammates see your actions in the system — name and avatar help quickly identify the user in logs and events.

8.2. Who can see it

Your name and avatar are visible only to members of your team.

8.3. How to change it

Name: click the pencil icon next to the Name field → enter a new value → Save

Avatar: click the avatar → upload an image → crop/edit if needed → save

9. Troubleshooting

9.1. Notifications are not arriving

Check that:

Telegram is linked and the bot is not blocked;

the required checkboxes/rules are enabled;

the Endpoint is reachable and responds to POST (2xx recommended);

events really occur (for alerts — the threshold and period conditions are met).

9.2. I can’t restore my password

Contact your team admin (or support if the admin is unavailable).

10. 2-minute setup checklist

Enable 2FA (at least one method).

Set a unique password.

Connect Telegram for notifications.

Enable critical notifications (limits, unknown orders, manual status changes).

Review sign-in history.

My Account

Security, notifications, and activity monitoring#

1. What matters for the business#

2. What you can configure in “My Account”#

3. Access security#

3.1. Change password#

3.2. How to make your password strong#

3.3. Two-factor authentication (2FA)#

2FA via Telegram#

2FA via Google Authenticator#

Can I enable both 2FA methods?#

How to disable 2FA#

If you lost access to Telegram/Authenticator#

4. Notifications: how not to miss important updates#

4.1. Where notifications are delivered#

4.2. Connect Telegram#

4.3. Send notifications to your Endpoint#

5. What types of notifications exist#

5.1. Activity notifications (events)#

5.2. Flow alerts (rules)#

6. How to configure flow alerts#

7. Sign-in history: security audit#

8. Profile: name and avatar#

8.1. Why you need a name and avatar#

8.2. Who can see it#

8.3. How to change it#

9. Troubleshooting#

9.1. Notifications are not arriving#

9.2. I can’t restore my password#

10. 2-minute setup checklist#