How to Secure Your Account with Two-Factor Authentication

Your AstaBill account holds your customer list, your revenue, and the account your money settles into. Two-factor authentication means someone who learns your password still cannot get in without your phone.

To turn on two-factor authentication

1. Go to Settings → Security.
2. Under Two-factor authentication, start the setup.
3. Scan the QR code with an authenticator app such as Google Authenticator or Authy. If you cannot scan, use the manual key shown beside it.
4. Enter the six-digit code from the app to confirm.
5. Save your recovery codes somewhere safe before you close the screen.

Store your recovery codes outside AstaBill — a password manager, or printed and filed. They are how you get back in if you lose the phone with your authenticator app on it. Without them, and without the phone, you are locked out.

The rest of the Security section

• Regenerate recovery codes — issue a fresh set if you think the old ones were seen. The previous set stops working.
• Sign out all devices — ends every active session, which is what you want after losing a laptop or phone.
• Disable two-factor authentication — turns the second step off again if you need to.

Turn this on before you add your payout account, not after. The payout account is the most valuable thing in the workspace, and it is the thing an attacker would change first.