Two-factor authentication

Two-factor authentication adds a second step when you sign in. After your email and password, you also enter a 6-digit code from an authenticator app on your phone or computer.

So even if someone learns your password, they still can't get into your account without the code.

Biller uses standard time-based codes (TOTP), which work with any authenticator app, including:

• Google Authenticator
• 1Password
• Authy
• Any other TOTP-compatible authenticator app

1. Click your name at the bottom of the sidebar to open Account, then choose Security
2. Under Two-factor authentication, click Enable two-factor authentication
3. Scan the QR code with your authenticator app. If you can't scan it, click Can't scan? Enter the code manually and type the key into your app.
4. Under Verify setup, enter the 6-digit Verification code from your app
5. Click Enable two-factor authentication
6. Save the recovery codes shown on the next screen (see below), then click Back to security

2FA is on as soon as the code is verified. The Security page then shows Enabled and how many recovery codes you have left.

1. Enter your email and password as usual
2. On the Verification Required screen, enter the 6-digit code from your authenticator app
3. Click Verify

The code in your app changes every 30 seconds, so enter the one showing now. If you don't have your app, click Use a recovery code and enter one of your recovery codes instead.

When you turn on 2FA, Biller gives you 8 recovery codes. Use them to sign in if you lose access to your authenticator app.

• The codes are shown only once, right after setup. Use Copy codes to copy them all.
• Each code works once. After you use it, it's gone.
• The Security page shows how many codes you have left

Keep your recovery codes somewhere safe and separate from your authenticator device, such as a password manager or a printed copy stored securely.

You can't view your codes again or generate new ones on their own. If you're running low, turn 2FA off and back on. You'll set up your authenticator app again and get a fresh set of 8 codes.

1. Go to Account > Security
2. Under Two-factor authentication, enter your password
3. Click Disable 2FA and confirm

After that, you only need your email and password to sign in. Your authenticator setup and any unused recovery codes are deleted, so if you turn 2FA on again, you'll scan a new QR code and get new recovery codes.