Securing your account with two-factor authentication

Two-factor authentication asks for a six-digit code from an authenticator app each time you sign in, on top of your password. You manage it, and your password, under Settings → Security, part of your personal settings alongside Profile and Appearance. If you signed up with Google, your account has no Billow password yet. Set one first with Forgot password? on the sign-in page, then use the steps below.

Two-factor authentication is a setting on your Billow account. It applies to every workspace you belong to and has no effect on anyone else’s account. Each person in a shared workspace turns it on separately.

Change your password

1. Go to Settings → Security.

2. In the Update password card, enter your Current Password.

3. Enter your new password under New Password and again under Confirm Password.

4. Click Save.

Billow shows “Password updated successfully.” Your new password needs at least 8 characters.

Turn on two-factor authentication

You need an authenticator app on your phone, such as Google Authenticator, 1Password or Authy.

1. Go to Settings → Security.

2. In the Two-Factor Authentication card, click Enable 2FA.

3. If Billow asks for your password, enter it and click Confirm password, then click Enable 2FA again.

4. Scan the QR code in the dialog with your authenticator app. If the app cannot scan it, copy the setup key under “or, enter the code manually” with the button beside it and enter the key in the app.

5. Click Continue.

6. Enter the 6-digit code from your authenticator app.

7. Click Confirm.

Two-factor authentication is only on once Billow accepts that code. The card then says “Two-factor authentication is currently enabled.” If you close the dialog before confirming, the setup is discarded and the card shows Enable 2FA again.

Recovery codes

Recovery codes let you sign in when you do not have your authenticator app. Once two-factor authentication is on, the card shows a 2FA Recovery Codes section with eight codes.

• Click View Recovery Codes to show them, and Hide Recovery Codes to hide them again.

• Each code works once.

• Store them somewhere other than the device that runs your authenticator app, such as a password manager.

Regenerate recovery codes

1. Go to Settings → Security.

2. Click View Recovery Codes.

3. Click Regenerate Codes.

Billow issues eight new codes. The previous codes stop working immediately.

Sign in with two-factor authentication

1. Sign in with your email and password, or with Google.

2. On the next screen, enter the six-digit code from your authenticator app.

To use a recovery code instead, click “login using a recovery code” below the field and enter one of your codes.

Turn off two-factor authentication

1. Go to Settings → Security.

2. Click Disable 2FA at the bottom of the Two-Factor Authentication card.

3. Click Disable 2FA in the dialog.

The dialog asks you to confirm:

Disable Two-Factor Authentication Are you sure you want to disable two-factor authentication? This will make your account less secure.

Turning it off deletes your authenticator setup and your recovery codes. If you turn it on again, you get a new QR code, a new setup key and eight new recovery codes.

If you lose your authenticator

1. Sign in with a recovery code.

2. Go to Settings → Security and turn off two-factor authentication.

3. Turn it on again and scan the new QR code with your new device.

If you have neither your authenticator app nor a recovery code, you cannot get back into your account from inside Billow. Owners and admins cannot reset another person’s two-factor authentication. Contact support.