Activating Two-Factor Authentication for Security

An Introduction to Two-Factor Authentication

Should you rely solely on a password for MyInvoiceOnline, you might leave yourself exposed to potential security breaches. If, for example, your login details are leaked from another site where you've used the same credentials, someone else could gain access.

Two-factor authentication (2FA) strengthens security by requiring an additional step after entering your password. This involves inputting a code sent exclusively to your phone, ensuring only you can log in, even if someone else knows your password.

Choosing Your 2FA Method

MyInvoiceOnline provides two distinct ways to secure your account. Both are dependable, differing mainly in how the security code is delivered to you.

SMS codes are sent directly to your phone after password entry. This code is simply entered for access, requiring no extra apps, just standard text capabilities.

With an Authenticator App, the security code is generated on your phone using apps like Google Authenticator, Authy, or Microsoft Authenticator. This code, refreshed every half-minute, functions offline.

Setting Up SMS-Based 2FA

1. Sign into MyInvoiceOnline.

2. Navigate to the My Account menu option.

3. Locate the Two-Factor Authentication area.

4. Choose the SMS method and click Set up Verification.

5. Provide your phone number and click Send verification code.

6. Input the six-digit code received via SMS in the designated field.

7. Confirm the setup, and you'll be prompted for this SMS code in future logins post password entry.

Using an Authenticator App for 2FA

If an authenticator app isn't installed, consider these free options available on both Android and iPhone:

• Google Authenticator

• Authy — this option also allows device backups and synchronisation

• Microsoft Authenticator

After downloading an app:

1. Log into MyInvoiceOnline.

2. Select My Account → Two-Factor Authentication.

3. Choose the Authenticator App method and hit Set up Verification.

4. Scan the QR code on screen through your phone's app (or enter a code manually).

5. Input the six-digit code, shown on your app, into MyInvoiceOnline, which updates every 30 seconds.

6. Confirm activation. For subsequent logins, this app code will be required.

Backup Codes: An Essential Reserve

When 2FA is active, 8 backup codes are generated for you. These codes serve as alternatives should you lose phone access, such as when it's misplaced or damaged.

How to Save These Codes:

1. Receive 8 backup codes post-2FA activation.

2. Click the button to copy all codes simultaneously.

3. Store them safely — in a password manager, as an encrypted note, or print for secure physical storage.

Understanding 2FA Login Process

Logging in involves an additional quick step:

1. On the login page, enter your email and password.

2. The system requests a one-time security code.

3. Provide either the SMS code or the app-generated code, depending on your setup.

4. After code submission, access is granted.

If phone access is unavailable, input a backup code instead — an option provided during login.

Switching Off 2FA and Reissuing Codes

Turning Off 2FA

To remove two-factor authentication, follow these steps:

1. Visit My Account → Two-Factor Authentication.

2. Press Disable 2FA.

3. Verify by entering your current password.

After this, login requires only your password.

Regenerating Backup Codes

If codes were lost or consumed, or you wish to generate them anew:

1. Access My Account → Two-Factor Authentication.

2. Opt to create new backup codes.

3. Confirm using your current password.

4. New codes are produced, cancelling previous ones.

5. Store the new set safely at once.