[{"question":{"category_id":1369274,"account_id":12867,"created_at":"2026-05-22T17:30:44.561Z","tag_names":["2fa","2fa setup","authenticator app","biller genie 2fa","mfa","pci compliance login","secure login","session timeout","totp","two factor authentication"],"answer_sample":"Multi-factor authentication (MFA) adds a second layer of security to your Biller ","long_answer_sample":"Multi-factor authentication (MFA) adds a second layer of security to your Biller Genie sign-in. The primary method is an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, etc.) using a time-based one-time password, or TOTP. If you have not set up the authenticator app or you lose access to it, Biller Genie can fall back to an ","language_id":1,"id":3826870,"last_published_date":"May 26th, 2026","last_published_avatar":"\u003cimg class=\"avatar circle\" width=\"96\" height=\"96\" style=\"background: url(\u0026quot;/initials_avatars/TA?bg=e0633a\u0026amp;s=192\u0026amp;fg=fff\u0026quot;) 0% 0% / 96px 96px;\" src=\"https://secure.gravatar.com/avatar/841e7ea85ebda058cdd7ee30638e7bee.png?s=96\u0026amp;d=blank\" /\u003e","last_published_user_name":"Thomas Aronica","indexable_body":"multi-factor authentication (mfa) adds second layer security biller genie sign-in. primary method authenticator app (google authenticator, microsoft authy, etc.) using time-based one-time password, totp. set lose access it, can fall back email-based secure link. guide walks setting happens device, recovery codes keep locked out. matters account holds sensitive invoice records, customers' stored payment methods, reports use reconcile bank. someone got see it. mfa blocks path requiring proof — code device physically hold letting in. processes payment-card data follows standards required every business handles card payments (pci dss). view move money one standards. turning user simplest thing customers protected. two ways verifies (recommended) 6-digit generated phone 1password, etc.). refreshes 30 seconds. pci guidance considers strongest. email link (fallback) yet temporarily send profile. click instead entering code. fallback path, everyday path. save plus strongest setup. meant one-off recovery, daily sign-ins. sign genie. name top-right corner open profile (account settings → profile). find two-factor button details page. step 1 scan qr \"add account\" \"scan code\" function. point setup scan, page shows manual key type 2 enter verification will start displaying current submit. 3 codes. display 10 single-use (formatted xxxxx-xxxxx). copy download text file store somewhere safe. once. confirm next sign-in onward, ask authenticator-app password. close built-in way get reinstall app. treat like backup key. storage best-practices regenerate needed. signing show prompt. app, entry, signed rest session. new triggers fresh \"remember browser days\" option, design stolen able skip future login. unavailable common scenarios forward still phone, just working time-based, out-of-sync clock break them. make sure date time automatic (network time). wait 30-second tick try freshly displayed lost replaced saved prompt sign-in, switch \"use instead\" codes, works soon in, either intentional, since otherwise protecting anything. support@billergenie.com address. support verify identity (business information, recent numbers, call owner) resetting account. plan taking day. uses enabled admin reset sends asking sender subject mentions verification. validity valid minutes. delivery usually minute. slower providers (outlook particular) take 5 secure-link arrive work checks order. reason merchants reach login issues. three batch incoming mail deliveries several check spam, junk, promotions folder. automated senders sometimes land outside main inbox. correct. resend screen. profile, necessarily originally with. typo, need update (or contact support). provider blocking senders. allowlisting rules include sending domain. ips specific records add. old expires; sent. refresh request another. sent side and, needed, fallback. log 25 minutes signs automatically inactivity. platform level applies extended individual user. inactivity timer resets click, type, navigate inside actively application, logged timeout fires input alongside controls session starts, ends. together idle sessions misused shared unattended devices. more, logs (session security) . frequently asked questions apps standard totp google bitwarden, duo, password managers feature. require pick whichever trust. positioned fallback, gives faster, day-to-day flow comfortable email, today, recommend favors. turn technically yes, strongly leaving on. insurance, payments-industry compliance reviews, rely system data. causing workflow problem, often (email allowlisting, update, re-enrollment) solves without disabling protection. account-wide enforcement roadmap. today enables cleanest workaround part onboarding checklist add verifying identity. avoid future, best-practices. yes. section, \"regenerate codes\" option. replaces unused previous stop working. always ones immediately. full related articles changing completing annual editing company address,","name":"Setting Up Two-Factor Authentication on Your Biller Genie Account","votes":0,"is_published":true,"slug":"setting-up-two-factor-authentication","first_category":"Account \u0026 Billing","categories_display_for_views":"Account \u0026 Billing","parent_categories":[1369274],"is_internal":false,"is_private":false,"extra_categories":[],"url":"/account-and-billing/setting-up-two-factor-authentication?from_search=237965576","host":"https://helpcenter.billergenie.com","body_txt":"multi-factor authentication (mfa) adds second layer security biller genie sign-in. primary method authenticator app (google authenticator, microsoft authy, etc.) using time-based one-time password, totp. set lose access it, can fall back email-based secure link. guide walks setting happens device, recovery codes keep locked out. matters account holds sensitive invoice records, customers' stored payment methods, reports use reconcile bank. someone got see it. mfa blocks path requiring proof — code device physically hold letting in. processes payment-card data follows standards required every business handles card payments (pci dss). view move money one standards. turning user simplest thing customers protected. two ways verifies (recommended) 6-digit generated phone 1password, etc.). refreshes 30 seconds. pci guidance considers strongest. email link (fallback) yet temporarily send profile. click instead entering code. fallback path, everyday path. save plus strongest setup. meant one-off recovery, daily sign-ins. sign genie. name top-right corner open profile (account settings → profile). find two-factor button details page. step 1 scan qr \"add account\" \"scan code\" function. point setup scan, page shows manual key type 2 enter verification will start displaying current submit. 3 codes. display 10 single-use (formatted xxxxx-xxxxx). copy download text file store somewhere safe. once. confirm next sign-in onward, ask authenticator-app password. close built-in way get reinstall app. treat like backup key. storage best-practices regenerate needed. signing show prompt. app, entry, signed rest session. new triggers fresh \"remember browser days\" option, design stolen able skip future login. unavailable common scenarios forward still phone, just working time-based, out-of-sync clock break them. make sure date time automatic (network time). wait 30-second tick try freshly displayed lost replaced saved prompt sign-in, switch \"use instead\" codes, works soon in, either intentional, since otherwise protecting anything. support@billergenie.com address. support verify identity (business information, recent numbers, call owner) resetting account. plan taking day. uses enabled admin reset sends asking sender subject mentions verification. validity valid minutes. delivery usually minute. slower providers (outlook particular) take 5 secure-link arrive work checks order. reason merchants reach login issues. three batch incoming mail deliveries several check spam, junk, promotions folder. automated senders sometimes land outside main inbox. correct. resend screen. profile, necessarily originally with. typo, need update (or contact support). provider blocking senders. allowlisting rules include sending domain. ips specific records add. old expires; sent. refresh request another. sent side and, needed, fallback. log 25 minutes signs automatically inactivity. platform level applies extended individual user. inactivity timer resets click, type, navigate inside actively application, logged timeout fires input alongside controls session starts, ends. together idle sessions misused shared unattended devices. more, logs (session security) . frequently asked questions apps standard totp google bitwarden, duo, password managers feature. require pick whichever trust. positioned fallback, gives faster, day-to-day flow comfortable email, today, recommend favors. turn technically yes, strongly leaving on. insurance, payments-industry compliance reviews, rely system data. causing workflow problem, often (email allowlisting, update, re-enrollment) solves without disabling protection. account-wide enforcement roadmap. today enables cleanest workaround part onboarding checklist add verifying identity. avoid future, best-practices. yes. section, \"regenerate codes\" option. replaces unused previous stop working. always ones immediately. full related articles changing completing annual editing company address,","categories":{"current":{"id":1369274,"name":"Account \u0026 Billing","url":"/account-and-billing"}},"category_param":"account-and-billing"}},{"question":{"category_id":1369274,"account_id":12867,"created_at":"2026-05-23T18:21:07.275Z","tag_names":["2fa backup codes","biller genie recovery codes","cant access 2fa","lost authenticator","mfa recovery","multi factor authentication recovery","recovery codes","reset 2fa"],"answer_sample":"Recovery codes are 10 single-use backup codes Biller Genie generates when you set","long_answer_sample":"Recovery codes are 10 single-use backup codes Biller Genie generates when you set up an authenticator app for multi-factor authentication (MFA). If you lose your phone, replace your device, or your authenticator app gets uninstalled, a recovery code lets you sign in and re-enroll without contacting support. They are the safety net that keeps MFA fro","language_id":1,"id":3827277,"last_published_date":"May 26th, 2026","last_published_avatar":"\u003cimg class=\"avatar circle\" width=\"96\" height=\"96\" style=\"background: url(\u0026quot;/initials_avatars/TA?bg=e0633a\u0026amp;s=192\u0026amp;fg=fff\u0026quot;) 0% 0% / 96px 96px;\" src=\"https://secure.gravatar.com/avatar/841e7ea85ebda058cdd7ee30638e7bee.png?s=96\u0026amp;d=blank\" /\u003e","last_published_user_name":"Thomas Aronica","indexable_body":"recovery codes 10 single-use backup biller genie generates set authenticator app multi-factor authentication (mfa). lose phone, replace device, gets uninstalled, code lets sign re-enroll without contacting support. safety net keeps mfa locking account. look like 10-character string formatted five characters, hyphen, characters — example a8k3f-7qm2n. issues per user, generated time complete setup. single-use. works exactly once. use in, specific invalidated. still nine. order-independent. can order. one equally valid. account-wide. tied device browser. computer, get see once, final screen flow account settings → user profile, click two-factor authentication. scan qr app. enter 6-digit verification success screen, displays codes. recovery-codes gives two actions copy clipboard (drops onto paste somewhere) download text file (saves plain .txt file). close page. security, store place show later. setup page saving them, retrieve regenerate fresh (which invalidates missed). always save navigating away. reach situation available lost factory-reset broken traveling etc. go sign-in email password usual. asks code, instead. type unused submit. signed in. just used now spent cross whatever list keeping. immediately new profile. there, (see below) 10. sensitive password. anyone holding bypass account, treat care. best manager (1password, bitwarden, dashlane, apple keychain, etc.) secure note attached login. encrypted, searchable, syncs across devices. fine print paper keep printout locked drawer safe \"break case emergency\" envelope. acceptable encrypted (bitlocker, filevault, password-protected zip) personal device. in... inbox, app, desktop, shared cloud folder company read, sticky monitor, anywhere else protect level stolen, attacker enabled. regenerating issue time. replaces old previous stop working immediately. right action take want suspect exposed (lost paper, sent chat mistake, stored somewhere insecure). recover top set. employee left may visibility though need password, good hygiene. genie. will initial sign-in. open profile (click name top-right corner profile). find section confirm. display way saved original discard scenario exist prevent. gone, self-serve back design defeat point mfa. support@billergenie.com business address. support verify identity using information, recent invoice numbers, phone call primary owner. verified, resets next scratch. plan taking day. soon anything else. frequently asked questions ten issued together authenticator-setup time, point. yes. shows counter indicating remain. low, happens disable disabling ever re-enable later, receive mistake gone moment regenerate. restore downloaded it, access (a home, safe). shred copies storage. accounts no. per-user. multiple (for example, manage businesses), labeled clearly related articles setting logs (session security) changing completing annual pci compliance","name":"Recovery Codes for Multi-Factor Authentication","votes":0,"is_published":true,"slug":"recovery-codes-for-multi-factor-authentication","first_category":"Account \u0026 Billing","categories_display_for_views":"Account \u0026 Billing","parent_categories":[1369274],"is_internal":false,"is_private":false,"extra_categories":[],"url":"/account-and-billing/recovery-codes-for-multi-factor-authentication?from_search=237965576","host":"https://helpcenter.billergenie.com","body_txt":"recovery codes 10 single-use backup biller genie generates set authenticator app multi-factor authentication (mfa). lose phone, replace device, gets uninstalled, code lets sign re-enroll without contacting support. safety net keeps mfa locking account. look like 10-character string formatted five characters, hyphen, characters — example a8k3f-7qm2n. issues per user, generated time complete setup. single-use. works exactly once. use in, specific invalidated. still nine. order-independent. can order. one equally valid. account-wide. tied device browser. computer, get see once, final screen flow account settings → user profile, click two-factor authentication. scan qr app. enter 6-digit verification success screen, displays codes. recovery-codes gives two actions copy clipboard (drops onto paste somewhere) download text file (saves plain .txt file). close page. security, store place show later. setup page saving them, retrieve regenerate fresh (which invalidates missed). always save navigating away. reach situation available lost factory-reset broken traveling etc. go sign-in email password usual. asks code, instead. type unused submit. signed in. just used now spent cross whatever list keeping. immediately new profile. there, (see below) 10. sensitive password. anyone holding bypass account, treat care. best manager (1password, bitwarden, dashlane, apple keychain, etc.) secure note attached login. encrypted, searchable, syncs across devices. fine print paper keep printout locked drawer safe \"break case emergency\" envelope. acceptable encrypted (bitlocker, filevault, password-protected zip) personal device. in... inbox, app, desktop, shared cloud folder company read, sticky monitor, anywhere else protect level stolen, attacker enabled. regenerating issue time. replaces old previous stop working immediately. right action take want suspect exposed (lost paper, sent chat mistake, stored somewhere insecure). recover top set. employee left may visibility though need password, good hygiene. genie. will initial sign-in. open profile (click name top-right corner profile). find section confirm. display way saved original discard scenario exist prevent. gone, self-serve back design defeat point mfa. support@billergenie.com business address. support verify identity using information, recent invoice numbers, phone call primary owner. verified, resets next scratch. plan taking day. soon anything else. frequently asked questions ten issued together authenticator-setup time, point. yes. shows counter indicating remain. low, happens disable disabling ever re-enable later, receive mistake gone moment regenerate. restore downloaded it, access (a home, safe). shred copies storage. accounts no. per-user. multiple (for example, manage businesses), labeled clearly related articles setting logs (session security) changing completing annual pci compliance","categories":{"current":{"id":1369274,"name":"Account \u0026 Billing","url":"/account-and-billing"}},"category_param":"account-and-billing"}}]