[{"question":{"category_id":1369274,"account_id":12867,"created_at":"2026-05-23T18:21:07.275Z","tag_names":["2fa backup codes","biller genie recovery codes","cant access 2fa","lost authenticator","mfa recovery","multi factor authentication recovery","recovery codes","reset 2fa"],"answer_sample":"Recovery codes are 10 single-use backup codes Biller Genie generates when you set","long_answer_sample":"Recovery codes are 10 single-use backup codes Biller Genie generates when you set up an authenticator app for multi-factor authentication (MFA). If you lose your phone, replace your device, or your authenticator app gets uninstalled, a recovery code lets you sign in and re-enroll without contacting support. They are the safety net that keeps MFA fro","language_id":1,"id":3827277,"last_published_date":"May 26th, 2026","last_published_avatar":"\u003cimg class=\"avatar circle\" width=\"96\" height=\"96\" style=\"background: url(\u0026quot;/initials_avatars/TA?bg=e0633a\u0026amp;s=192\u0026amp;fg=fff\u0026quot;) 0% 0% / 96px 96px;\" src=\"https://secure.gravatar.com/avatar/841e7ea85ebda058cdd7ee30638e7bee.png?s=96\u0026amp;d=blank\" /\u003e","last_published_user_name":"Thomas Aronica","indexable_body":"recovery codes 10 single-use backup biller genie generates set authenticator app multi-factor authentication (mfa). lose phone, replace device, gets uninstalled, code lets sign re-enroll without contacting support. safety net keeps mfa locking account. look like 10-character string formatted five characters, hyphen, characters — example a8k3f-7qm2n. issues per user, generated time complete setup. single-use. works exactly once. use in, specific invalidated. still nine. order-independent. can order. one equally valid. account-wide. tied device browser. computer, get see once, final screen flow account settings → user profile, click two-factor authentication. scan qr app. enter 6-digit verification success screen, displays codes. recovery-codes gives two actions copy clipboard (drops onto paste somewhere) download text file (saves plain .txt file). close page. security, store place show later. setup page saving them, retrieve regenerate fresh (which invalidates missed). always save navigating away. reach situation available lost factory-reset broken traveling etc. go sign-in email password usual. asks code, instead. type unused submit. signed in. just used now spent cross whatever list keeping. immediately new profile. there, (see below) 10. sensitive password. anyone holding bypass account, treat care. best manager (1password, bitwarden, dashlane, apple keychain, etc.) secure note attached login. encrypted, searchable, syncs across devices. fine print paper keep printout locked drawer safe \"break case emergency\" envelope. acceptable encrypted (bitlocker, filevault, password-protected zip) personal device. in... inbox, app, desktop, shared cloud folder company read, sticky monitor, anywhere else protect level stolen, attacker enabled. regenerating issue time. replaces old previous stop working immediately. right action take want suspect exposed (lost paper, sent chat mistake, stored somewhere insecure). recover top set. employee left may visibility though need password, good hygiene. genie. will initial sign-in. open profile (click name top-right corner profile). find section confirm. display way saved original discard scenario exist prevent. gone, self-serve back design defeat point mfa. support@billergenie.com business address. support verify identity using information, recent invoice numbers, phone call primary owner. verified, resets next scratch. plan taking day. soon anything else. frequently asked questions ten issued together authenticator-setup time, point. yes. shows counter indicating remain. low, happens disable disabling ever re-enable later, receive mistake gone moment regenerate. restore downloaded it, access (a home, safe). shred copies storage. accounts no. per-user. multiple (for example, manage businesses), labeled clearly related articles setting logs (session security) changing completing annual pci compliance","name":"Recovery Codes for Multi-Factor Authentication","votes":0,"is_published":true,"slug":"recovery-codes-for-multi-factor-authentication","first_category":"Account \u0026 Billing","categories_display_for_views":"Account \u0026 Billing","parent_categories":[1369274],"is_internal":false,"is_private":false,"extra_categories":[],"url":"/account-and-billing/recovery-codes-for-multi-factor-authentication?from_search=237965157","host":"https://helpcenter.billergenie.com","body_txt":"recovery codes 10 single-use backup biller genie generates set authenticator app multi-factor authentication (mfa). lose phone, replace device, gets uninstalled, code lets sign re-enroll without contacting support. safety net keeps mfa locking account. look like 10-character string formatted five characters, hyphen, characters — example a8k3f-7qm2n. issues per user, generated time complete setup. single-use. works exactly once. use in, specific invalidated. still nine. order-independent. can order. one equally valid. account-wide. tied device browser. computer, get see once, final screen flow account settings → user profile, click two-factor authentication. scan qr app. enter 6-digit verification success screen, displays codes. recovery-codes gives two actions copy clipboard (drops onto paste somewhere) download text file (saves plain .txt file). close page. security, store place show later. setup page saving them, retrieve regenerate fresh (which invalidates missed). always save navigating away. reach situation available lost factory-reset broken traveling etc. go sign-in email password usual. asks code, instead. type unused submit. signed in. just used now spent cross whatever list keeping. immediately new profile. there, (see below) 10. sensitive password. anyone holding bypass account, treat care. best manager (1password, bitwarden, dashlane, apple keychain, etc.) secure note attached login. encrypted, searchable, syncs across devices. fine print paper keep printout locked drawer safe \"break case emergency\" envelope. acceptable encrypted (bitlocker, filevault, password-protected zip) personal device. in... inbox, app, desktop, shared cloud folder company read, sticky monitor, anywhere else protect level stolen, attacker enabled. regenerating issue time. replaces old previous stop working immediately. right action take want suspect exposed (lost paper, sent chat mistake, stored somewhere insecure). recover top set. employee left may visibility though need password, good hygiene. genie. will initial sign-in. open profile (click name top-right corner profile). find section confirm. display way saved original discard scenario exist prevent. gone, self-serve back design defeat point mfa. support@billergenie.com business address. support verify identity using information, recent invoice numbers, phone call primary owner. verified, resets next scratch. plan taking day. soon anything else. frequently asked questions ten issued together authenticator-setup time, point. yes. shows counter indicating remain. low, happens disable disabling ever re-enable later, receive mistake gone moment regenerate. restore downloaded it, access (a home, safe). shred copies storage. accounts no. per-user. multiple (for example, manage businesses), labeled clearly related articles setting logs (session security) changing completing annual pci compliance","categories":{"current":{"id":1369274,"name":"Account \u0026 Billing","url":"/account-and-billing"}},"category_param":"account-and-billing"}},{"question":{"category_id":1369274,"account_id":12867,"created_at":"2026-05-22T17:30:44.561Z","tag_names":["2fa","2fa setup","authenticator app","biller genie 2fa","mfa","pci compliance login","secure login","session timeout","totp","two factor authentication"],"answer_sample":"Multi-factor authentication (MFA) adds a second layer of security to your Biller ","long_answer_sample":"Multi-factor authentication (MFA) adds a second layer of security to your Biller Genie sign-in. The primary method is an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, etc.) using a time-based one-time password, or TOTP. If you have not set up the authenticator app or you lose access to it, Biller Genie can fall back to an ","language_id":1,"id":3826870,"last_published_date":"May 26th, 2026","last_published_avatar":"\u003cimg class=\"avatar circle\" width=\"96\" height=\"96\" style=\"background: url(\u0026quot;/initials_avatars/TA?bg=e0633a\u0026amp;s=192\u0026amp;fg=fff\u0026quot;) 0% 0% / 96px 96px;\" src=\"https://secure.gravatar.com/avatar/841e7ea85ebda058cdd7ee30638e7bee.png?s=96\u0026amp;d=blank\" /\u003e","last_published_user_name":"Thomas Aronica","indexable_body":"multi-factor authentication (mfa) adds second layer security biller genie sign-in. primary method authenticator app (google authenticator, microsoft authy, etc.) using time-based one-time password, totp. set lose access it, can fall back email-based secure link. guide walks setting happens device, recovery codes keep locked out. matters account holds sensitive invoice records, customers' stored payment methods, reports use reconcile bank. someone got see it. mfa blocks path requiring proof — code device physically hold letting in. processes payment-card data follows standards required every business handles card payments (pci dss). view move money one standards. turning user simplest thing customers protected. two ways verifies (recommended) 6-digit generated phone 1password, etc.). refreshes 30 seconds. pci guidance considers strongest. email link (fallback) yet temporarily send profile. click instead entering code. fallback path, everyday path. save plus strongest setup. meant one-off recovery, daily sign-ins. sign genie. name top-right corner open profile (account settings → profile). find two-factor button details page. step 1 scan qr \"add account\" \"scan code\" function. point setup scan, page shows manual key type 2 enter verification will start displaying current submit. 3 codes. display 10 single-use (formatted xxxxx-xxxxx). copy download text file store somewhere safe. once. confirm next sign-in onward, ask authenticator-app password. close built-in way get reinstall app. treat like backup key. storage best-practices regenerate needed. signing show prompt. app, entry, signed rest session. new triggers fresh \"remember browser days\" option, design stolen able skip future login. unavailable common scenarios forward still phone, just working time-based, out-of-sync clock break them. make sure date time automatic (network time). wait 30-second tick try freshly displayed lost replaced saved prompt sign-in, switch \"use instead\" codes, works soon in, either intentional, since otherwise protecting anything. support@billergenie.com address. support verify identity (business information, recent numbers, call owner) resetting account. plan taking day. uses enabled admin reset sends asking sender subject mentions verification. validity valid minutes. delivery usually minute. slower providers (outlook particular) take 5 secure-link arrive work checks order. reason merchants reach login issues. three batch incoming mail deliveries several check spam, junk, promotions folder. automated senders sometimes land outside main inbox. correct. resend screen. profile, necessarily originally with. typo, need update (or contact support). provider blocking senders. allowlisting rules include sending domain. ips specific records add. old expires; sent. refresh request another. sent side and, needed, fallback. log 25 minutes signs automatically inactivity. platform level applies extended individual user. inactivity timer resets click, type, navigate inside actively application, logged timeout fires input alongside controls session starts, ends. together idle sessions misused shared unattended devices. more, logs (session security) . frequently asked questions apps standard totp google bitwarden, duo, password managers feature. require pick whichever trust. positioned fallback, gives faster, day-to-day flow comfortable email, today, recommend favors. turn technically yes, strongly leaving on. insurance, payments-industry compliance reviews, rely system data. causing workflow problem, often (email allowlisting, update, re-enrollment) solves without disabling protection. account-wide enforcement roadmap. today enables cleanest workaround part onboarding checklist add verifying identity. avoid future, best-practices. yes. section, \"regenerate codes\" option. replaces unused previous stop working. always ones immediately. full related articles changing completing annual editing company address,","name":"Setting Up Two-Factor Authentication on Your Biller Genie Account","votes":0,"is_published":true,"slug":"setting-up-two-factor-authentication","first_category":"Account \u0026 Billing","categories_display_for_views":"Account \u0026 Billing","parent_categories":[1369274],"is_internal":false,"is_private":false,"extra_categories":[],"url":"/account-and-billing/setting-up-two-factor-authentication?from_search=237965157","host":"https://helpcenter.billergenie.com","body_txt":"multi-factor authentication (mfa) adds second layer security biller genie sign-in. primary method authenticator app (google authenticator, microsoft authy, etc.) using time-based one-time password, totp. set lose access it, can fall back email-based secure link. guide walks setting happens device, recovery codes keep locked out. matters account holds sensitive invoice records, customers' stored payment methods, reports use reconcile bank. someone got see it. mfa blocks path requiring proof — code device physically hold letting in. processes payment-card data follows standards required every business handles card payments (pci dss). view move money one standards. turning user simplest thing customers protected. two ways verifies (recommended) 6-digit generated phone 1password, etc.). refreshes 30 seconds. pci guidance considers strongest. email link (fallback) yet temporarily send profile. click instead entering code. fallback path, everyday path. save plus strongest setup. meant one-off recovery, daily sign-ins. sign genie. name top-right corner open profile (account settings → profile). find two-factor button details page. step 1 scan qr \"add account\" \"scan code\" function. point setup scan, page shows manual key type 2 enter verification will start displaying current submit. 3 codes. display 10 single-use (formatted xxxxx-xxxxx). copy download text file store somewhere safe. once. confirm next sign-in onward, ask authenticator-app password. close built-in way get reinstall app. treat like backup key. storage best-practices regenerate needed. signing show prompt. app, entry, signed rest session. new triggers fresh \"remember browser days\" option, design stolen able skip future login. unavailable common scenarios forward still phone, just working time-based, out-of-sync clock break them. make sure date time automatic (network time). wait 30-second tick try freshly displayed lost replaced saved prompt sign-in, switch \"use instead\" codes, works soon in, either intentional, since otherwise protecting anything. support@billergenie.com address. support verify identity (business information, recent numbers, call owner) resetting account. plan taking day. uses enabled admin reset sends asking sender subject mentions verification. validity valid minutes. delivery usually minute. slower providers (outlook particular) take 5 secure-link arrive work checks order. reason merchants reach login issues. three batch incoming mail deliveries several check spam, junk, promotions folder. automated senders sometimes land outside main inbox. correct. resend screen. profile, necessarily originally with. typo, need update (or contact support). provider blocking senders. allowlisting rules include sending domain. ips specific records add. old expires; sent. refresh request another. sent side and, needed, fallback. log 25 minutes signs automatically inactivity. platform level applies extended individual user. inactivity timer resets click, type, navigate inside actively application, logged timeout fires input alongside controls session starts, ends. together idle sessions misused shared unattended devices. more, logs (session security) . frequently asked questions apps standard totp google bitwarden, duo, password managers feature. require pick whichever trust. positioned fallback, gives faster, day-to-day flow comfortable email, today, recommend favors. turn technically yes, strongly leaving on. insurance, payments-industry compliance reviews, rely system data. causing workflow problem, often (email allowlisting, update, re-enrollment) solves without disabling protection. account-wide enforcement roadmap. today enables cleanest workaround part onboarding checklist add verifying identity. avoid future, best-practices. yes. section, \"regenerate codes\" option. replaces unused previous stop working. always ones immediately. full related articles changing completing annual editing company address,","categories":{"current":{"id":1369274,"name":"Account \u0026 Billing","url":"/account-and-billing"}},"category_param":"account-and-billing"}},{"question":{"category_id":1368782,"account_id":12867,"created_at":"2026-02-09T16:33:38.000Z","tag_names":["185.189.236.0","185.211.120.0","185.250.236.0","2fa email not arriving","87.253.232.0","allowlist biller genie","biller genie emails missing","biller genie sending ip ranges","email deliverability","email not received","godaddy advanced email security","google workspace allowlist","ip-based filtering","mailjet ip allowlist","merchant receipt missing","microsoft 365 allowlist","office 365 spam","proofpoint mimecast barracuda","spam filter","squarespace email allowlist","whitelist biller genie ips"],"answer_sample":"If Biller Genie's invoice reminders, receipts, or autopay-failure alerts aren't r","long_answer_sample":"If Biller Genie's invoice reminders, receipts, or autopay-failure alerts aren't reaching you or your customers, the most common cause is your email provider's spam filter rejecting or quarantining the mail before delivery. This article walks through how to recognize an IP-based delivery problem, how to allowlist Biller Genie's sending IPs at the maj","language_id":1,"id":3686011,"last_published_date":"May 30th, 2026","last_published_avatar":"\u003cimg class=\"avatar circle\" width=\"96\" height=\"96\" style=\"background: url(\u0026quot;/initials_avatars/TA?bg=e0633a\u0026amp;s=192\u0026amp;fg=fff\u0026quot;) 0% 0% / 96px 96px;\" src=\"https://secure.gravatar.com/avatar/841e7ea85ebda058cdd7ee30638e7bee.png?s=96\u0026amp;d=blank\" /\u003e","last_published_user_name":"Thomas Aronica","indexable_body":"biller genie's invoice reminders, receipts, autopay-failure alerts reaching customers, common cause email provider's spam filter rejecting quarantining mail delivery. article walks recognize ip-based delivery problem, allowlist sending ips major providers, escalate genie support. problem outbound customers (not inbound you), right fix usually custom domain — see domains . focuses problems emails staff inbox blocked. can affected sends merchant copies sales receipts auto-pay failure sync (accounting software disconnected) customer-driven notifications (card updated, card expired) password reset two-factor authentication users system-generated reports scheduled signs blocking stopped receiving settings changed genie. 2fa code arrive log (and truly missing). get others don't. hosting provider mentions \"advanced security,\" \"third-party sender filtering,\" \"outbound relay protection.\" folder shows zero matching messages rejected gateway, delivered spam. ip ranges transactional mailjet. allow security system, four below. simplest approach smtp inbound-connection level bypasses scoring, rate limiting, reputation filtering addresses specifically, without changing defaults sender. range (cidr) 87.253.232.0/21 185.189.236.0/22 185.211.120.0/22 185.250.236.0/22 accepts sender-domain allowlists, additionally mailjet.com billergenie.com belt-and-suspenders coverage. allowlisting layer reliable two. provider-specific instructions google workspace (gmail) sign admin.google.com admin. go apps \u0026gt; gmail spam, phishing malware. locate add (request support) and/or billergenie.com. save. changes propagate hour. microsoft 365 / outlook defender portal admin global \u0026amp; collaboration policies rules threat anti-spam policies. edit default connection policy. allowed addresses. alternatively, policy, senders. save wait 30 minutes propagation. godaddy (advanced security) godaddy's advanced reason third-party missing mailbox. email.secureserver.net open block lists. list, plus provided check quarantine anything previously held senders now release. squarespace (google hood) squarespace's provisioned via workspace, steps credentials domain. access, contact support either grant run change behalf. providers (proofpoint, mimecast, barracuda, cisco, on-prem exchange) enterprise gateways feature. location varies ask team gateway's confirming successful genie, trigger known example, send test reminder yourself, request logging back in, use \"resend confirmation email\" button user record. quarantine) within 5 minutes. still missing, pull mailjet send. will tell accepted, bounced, soft-bounced, blocked destination server's response message identifies blocker. assistance required generally require access console. merchants themselves. console, forward person whoever manages domain's console take 10-15 copy paste administrator. gives everything need. hi, please following gateway (invoices, codes, account notifications) reliably possible, filtering, bypassed place, let know confirm receipt email. thank you. trouble allowlisted support@billergenie.com (merchant alerts, etc.) approximate timestamp arrived recipient address whether successfully handed was. related articles writing effective configure general","name":"Email Deliverability Troubleshooting","votes":0,"is_published":true,"slug":"allowlisting-biller-genie-ips-by-email-provider","first_category":"Control Panel \u0026 Settings","categories_display_for_views":"Control Panel \u0026 Settings","parent_categories":[1368782],"is_internal":false,"is_private":false,"extra_categories":[],"url":"/settings-and-account/allowlisting-biller-genie-ips-by-email-provider?from_search=237965157","host":"https://helpcenter.billergenie.com","body_txt":"biller genie's invoice reminders, receipts, autopay-failure alerts reaching customers, common cause email provider's spam filter rejecting quarantining mail delivery. article walks recognize ip-based delivery problem, allowlist sending ips major providers, escalate genie support. problem outbound customers (not inbound you), right fix usually custom domain — see domains . focuses problems emails staff inbox blocked. can affected sends merchant copies sales receipts auto-pay failure sync (accounting software disconnected) customer-driven notifications (card updated, card expired) password reset two-factor authentication users system-generated reports scheduled signs blocking stopped receiving settings changed genie. 2fa code arrive log (and truly missing). get others don't. hosting provider mentions \"advanced security,\" \"third-party sender filtering,\" \"outbound relay protection.\" folder shows zero matching messages rejected gateway, delivered spam. ip ranges transactional mailjet. allow security system, four below. simplest approach smtp inbound-connection level bypasses scoring, rate limiting, reputation filtering addresses specifically, without changing defaults sender. range (cidr) 87.253.232.0/21 185.189.236.0/22 185.211.120.0/22 185.250.236.0/22 accepts sender-domain allowlists, additionally mailjet.com billergenie.com belt-and-suspenders coverage. allowlisting layer reliable two. provider-specific instructions google workspace (gmail) sign admin.google.com admin. go apps \u0026gt; gmail spam, phishing malware. locate add (request support) and/or billergenie.com. save. changes propagate hour. microsoft 365 / outlook defender portal admin global \u0026amp; collaboration policies rules threat anti-spam policies. edit default connection policy. allowed addresses. alternatively, policy, senders. save wait 30 minutes propagation. godaddy (advanced security) godaddy's advanced reason third-party missing mailbox. email.secureserver.net open block lists. list, plus provided check quarantine anything previously held senders now release. squarespace (google hood) squarespace's provisioned via workspace, steps credentials domain. access, contact support either grant run change behalf. providers (proofpoint, mimecast, barracuda, cisco, on-prem exchange) enterprise gateways feature. location varies ask team gateway's confirming successful genie, trigger known example, send test reminder yourself, request logging back in, use \"resend confirmation email\" button user record. quarantine) within 5 minutes. still missing, pull mailjet send. will tell accepted, bounced, soft-bounced, blocked destination server's response message identifies blocker. assistance required generally require access console. merchants themselves. console, forward person whoever manages domain's console take 10-15 copy paste administrator. gives everything need. hi, please following gateway (invoices, codes, account notifications) reliably possible, filtering, bypassed place, let know confirm receipt email. thank you. trouble allowlisted support@billergenie.com (merchant alerts, etc.) approximate timestamp arrived recipient address whether successfully handed was. related articles writing effective configure general","categories":{"current":{"id":1368782,"name":"Control Panel \u0026 Settings","url":"/settings-and-account"}},"category_param":"settings-and-account"}}]