Shopify POS PIN Codes: Setup, Reset and Staff Access

Updated August 2026. Consolidated guide to Shopify POS staff PINs, permissions, and device activation.

Where to find and set POS PINs

PINs live in your staff records, not your payment settings. In Shopify admin:

1. Go to Settings > Users and permissions
2. Click the staff member's name
3. Scroll to the Point of Sale section
4. Enter a unique four-digit PIN, or let Shopify generate one
5. Save

You can also issue a PIN from the register itself: in the POS app, go to Settings > Staff, select the account, and issue a new PIN. Useful when someone is locked out mid-shift and the person with admin access is not on site.

What a PIN actually does

A PIN identifies who is standing at the register. That identification is what makes several things possible: sales attributed to individual staff, void and refund tracking tied to a person, manager approvals for high-risk actions, and permission levels that differ between an associate and a supervisor.

Without unique PINs, none of that works. A shared PIN across a team produces reporting that says the store made the sale, which is useless for coaching, scheduling, or investigating a discrepancy. It is worth the five minutes per person.

Permissions and the access ladder

PINs work alongside staff permissions rather than replacing them. The permission that governs POS access is named Manage Point of Sale Staff — a staff member needs it to access and manage POS features. Assign it deliberately.

The usual ladder runs from associate to manager: an associate can ring sales and process straightforward returns, while a manager can apply manual discounts, approve voids, and handle exceptions. POS Pro extends this into full role-based permissions with PIN-level tracking; POS Lite offers only limited staff roles. Our Lite versus Pro breakdown covers where that line sits.

Since June 2026, a POS activity log tracks high-risk actions — voids, refunds, manual discounts — with staff accountability and manager approvals. That log is only meaningful if PINs are unique.

Device activation

Setting up a new device, or signing back in after a major update, uses an activation code rather than a PIN. The device must be online and signed into the correct Shopify account for the activation page to accept the code. This trips people up because it looks like a PIN problem when it is actually an account or connectivity problem — if the activation page will not accept a valid code, check which Shopify account the device is signed into before reissuing anything.

When a PIN stops working

Work through these in order before resetting anything:

• Check for a typo. PINs are four digits. Most reported failures are mis-entry, particularly on a busy counter.
• Confirm the person is on their own account. Staff frequently try their PIN against a colleague's selected account, which will always fail.
• Check the account is still active. A staff member removed or suspended in admin keeps their PIN but loses access.
• Confirm the permission. Without Manage Point of Sale Staff, POS features will not appear regardless of the PIN.
• Then reset it — from admin under Settings > Users and permissions, or in the POS app under Settings > Staff.

A PIN reset is not a password reset. These are separate. A staff member's Shopify account password is changed under their own Manage Account settings; the POS PIN is changed in the places above. Resetting one does nothing to the other, which is a common source of confusion when someone is locked out of both.

Managing PINs well

A few practices that matter more than they sound:

• One PIN per person, always. Shared PINs defeat the entire purpose.
• Remove access the day someone leaves. Dormant accounts with register access are the most common internal risk, and the easiest to forget. The Devices view in admin also lets you remotely log out a lost or stolen unit.
• Rotate periodically, particularly after staff turnover — quarterly is a reasonable default. Rotating too often just produces PINs written on sticky notes.
• Pair with two-factor authentication on the Shopify account itself. The PIN protects the register; 2FA protects the admin behind it.
• Avoid obvious sequences. 1234 and the store's street number are not access control.

Frequently asked questions

Where is the POS PIN on Shopify?

In Shopify admin under Settings > Users and permissions. Click the staff member's name and scroll to the Point of Sale section, where you can view or edit their PIN. It is not under payment settings, which is a common wrong turn.

How do I generate a Shopify POS PIN?

In Settings > Users and permissions, select the staff member and either enter a unique four-digit PIN manually in the Point of Sale section, or use Shopify's option to generate one automatically. Generated PINs avoid the tendency to pick memorable and therefore guessable numbers.

How do I reset a Shopify POS PIN?

From admin: Settings > Users and permissions, select the user, enter a new PIN or generate one, and save. From the register: Settings > Staff in the POS app, select the account, and issue a new PIN. Before resetting, confirm the failure is not a typo or the staff member selecting the wrong account — those are the two most common causes.

What's the difference between a POS PIN and my Shopify password?

The PIN unlocks the register and identifies who is ringing a sale. The password logs into the Shopify account itself. They are managed separately — passwords under Manage Account settings, PINs under Users and permissions — and resetting one has no effect on the other.

Can two staff share a PIN?

Technically yes, practically never. A shared PIN makes sales attribution, void tracking, and the POS activity log meaningless, and removes any ability to trace a discrepancy to a person. Issue one per staff member.

What permission do staff need to use POS?

Manage Point of Sale Staff, assigned in admin under Settings > Users and permissions. Without it, POS features will not be available to that staff member no matter what PIN they hold.

The bottom line

PINs are a small piece of configuration that quietly determines whether your retail reporting is worth anything. Unique PINs per person, the right permission assigned, access removed promptly when someone leaves, and a clear understanding that a PIN reset and a password reset are different things — that covers most of what goes wrong.

First Pier plans and implements Shopify POS rollouts for retailers running both an online store and a physical location, including several across Maine. If you are setting up staff structure across multiple locations, get in touch.