ERP security guides: two-factor authentication and sign-in

Quick answer Biznsbook protects sign-in with multi-factor authentication from any authenticator app, eight one-time backup codes, account lockout after repeated wrong attempts, email alerts when MFA changes, and an audit trail. Administrators can require MFA for roles such as Company Admin and reset it for a user who loses their phone.

What Biznsbook does to protect sign-in

  • Multi-factor authentication with any authenticator app, such as Google Authenticator, Microsoft Authenticator, Authy, 1Password or Bitwarden, set up by scanning a QR code.
  • Eight one-time backup codes, shown once with copy, download and print, and renewable at any time.
  • Remember this device for 30 days on a trusted browser.
  • Account lockout for 15 minutes after repeated wrong passwords, app codes or backup codes.
  • Email alerts when MFA is turned on or off, backup codes are renewed, or an administrator resets MFA.
  • MFA required by role, set by the platform administrator, and Reset MFA for company administrators in Manage users.
  • Security audit log of MFA sign-ins, failures, lockouts and changes.
All features Privacy Pricing

Guides in this cluster

Long-form guides on two-factor authentication for your ERP, setting it up, and getting back in after losing your phone.

Frequently asked questions

Does Biznsbook support multi-factor authentication?

Yes. Every Biznsbook user can turn on multi-factor authentication with any standard authenticator app, on every plan, with no extra licence.

Can MFA be made mandatory?

Yes. The platform administrator can require MFA for chosen roles, such as SiteAdmin and CompanyAdmin. Users in those roles must set it up before they can use the app.

What if a user loses their phone?

They sign in with one of their one-time backup codes and use the emailed recovery link to set MFA up again. With no codes left, a company administrator can reset MFA from Manage users.

Which second factors are supported?

Codes from an authenticator app (TOTP). SMS codes, email codes, security keys and passkeys are not supported for sign-in.