Skip to content

Welcome back

Sign in to your Payora dashboard.

🔒 Secured by Astrina ID · by continuing you agree to our Terms & Privacy Policy
or

Sign in to your crypto payment dashboard

Your Payora dashboard is the control plane for crypto invoices, payment links, balances, mass payouts, and withdrawals. After signing in you can watch payments confirm on the hosted checkout and manage everything from one place.

By default, payments are credited to your Payora balance and can be withdrawn to your wallet. Direct settlement using merchant public-key material is available by operator approval for vetted accounts. Sign-in is protected with rate limiting, optional two-factor authentication (TOTP), and revocable sessions.

Do not have an account yet? Create one free to get your API key and secret in seconds. Forgot your password? Reset it here.

FAQ

Frequently asked questions

Straight answers, including the uncomfortable ones: custody, fees and what happens when something goes wrong.

Help centre

I forgot my password — how do I sign in?

Use the "Forgot password?" link to request a secure reset. Enter your account email and Payora sends a one-hour reset link so you can set a new password and sign in again.

Does Payora support two-factor authentication?

Yes. You can enable time-based one-time password (TOTP) two-factor authentication in settings, with printable recovery codes. When enabled, sign-in requires your password and a 6-digit code from your authenticator app.

How do I create a Payora account?

Go to the registration page, enter an email and a password of at least 8 characters, and your account and API keys are created instantly. No card, no KYC to start.

Can I manage more than one store from one login?

Yes. A single Payora account can hold multiple merchant stores, each with its own API keys, balance and settings. Switch between them from the dashboard without signing out, which is useful if you run several sites or brands.

Is my session secure on a shared device?

Sessions are tracked server-side and can be revoked individually from settings, and state-changing actions are protected with CSRF tokens. On a shared device, sign out when finished and enable two-factor authentication for an extra layer of protection.

What this page answers