How to Set Up Two-Factor Authentication in Biznsbook
Why MFA setup often goes wrong
Most people agree two-factor authentication is a good idea, but setup is where it fails. A QR code that will not scan, a code that is rejected, or a phone that is replaced a month later turns a security feature into a lock-out.
The usual causes are small: the phone's clock is a minute off, the wrong account was picked in the app, or the backup codes were never saved. Each one is easy to avoid if the steps are clear.
Biznsbook puts the whole setup on one page with three numbered steps, a QR code, a copyable setup key, and a guide panel that answers the common questions, so a user can finish in about a minute without help.
Why this happens
- the QR code is not scanned and the key is typed wrongly
- the phone clock is not set to automatic
- backup codes are not saved
- remember this device is ticked on a shared computer
- nobody checks that MFA is actually on afterwards
Biznsbook addresses this through QR code setup, manual setup key, eight one-time backup codes, remember this device for 30 days, available to every user without an extra licence.
Most account takeovers start with a reused or phished password. A second step on the user's own phone stops them.
Step-by-step: Set Up Two-Factor Authentication in Biznsbook
Written for owners, administrators and every user who signs in to Biznsbook.
- Open My account. Open your name menu, choose My account, and on the Multi-factor authentication card click Set up MFA.
- Install an authenticator app. Install any time-based (TOTP) app on your phone, for example Google Authenticator, Microsoft Authenticator, Authy, 1Password or Bitwarden.
- Scan the QR code. In the app tap Add account or the + button and scan the QR code on the page.
- Or enter the key. If you cannot scan, open Can't scan? Enter the key instead, click Copy key and add it in the app as a time-based account named Biznsbook.
- Enter the 6-digit code. Type the code the app shows for Biznsbook into 6-digit code and click Turn on MFA.
- Save your backup codes. Use Copy all, Download .txt or Print to keep the eight backup codes somewhere safe. They are not shown again.
- Check it is on. The card on My account now shows On, and you receive an email confirming the change.
Review results after the first full monthly cycle. Adjust roles, mappings, or approvals where the same exception repeats.
Screen names in this guide match Biznsbook: My account, Set up MFA, Manage MFA, Two-step verification, Use a backup code, Session Security and Manage users.
Common mistakes to avoid
- Mistake 1: The QR code is not scanned and the key is typed wrongly Repeating this each month usually shows up first in a hijacked account or a locked-out user.
- Mistake 2: The phone clock is not set to automatic Repeating this each month usually shows up first in a hijacked account or a locked-out user.
- Mistake 3: Backup codes are not saved Repeating this each month usually shows up first in a hijacked account or a locked-out user.
- Mistake 4: Remember this device is ticked on a shared computer Repeating this each month usually shows up first in a hijacked account or a locked-out user.
- Mistake 5: Nobody checks that MFA is actually on afterwards Repeating this each month usually shows up first in a hijacked account or a locked-out user.
Each of these leaves an account open to anyone who learns the password, or locks out the real user when a phone is lost. Fix them before you need them.
Best practices that hold up as you scale
- Open My account — Open your name menu, choose My account, and on the Multi-factor authentication card click Set up MFA.
- Install an authenticator app — Install any time-based (TOTP) app on your phone, for example Google Authenticator, Microsoft Authenticator, Authy, 1Password or Bitwarden.
- Scan the QR code — In the app tap Add account or the + button and scan the QR code on the page.
- Or enter the key — If you cannot scan, open Can't scan? Enter the key instead, click Copy key and add it in the app as a time-based account named Biznsbook.
- Enter the 6-digit code — Type the code the app shows for Biznsbook into 6-digit code and click Turn on MFA.
Turn MFA on for administrators first, keep backup codes away from the phone, and agree a recovery routine before anyone needs it.
How Biznsbook supports this workflow
QR code setup is part of Biznsbook sign-in security for every user on every plan, with each sign-in, failure and change recorded in the security audit log.
manual setup key is part of Biznsbook sign-in security for every user on every plan, with each sign-in, failure and change recorded in the security audit log.
eight one-time backup codes is part of Biznsbook sign-in security for every user on every plan, with each sign-in, failure and change recorded in the security audit log.
remember this device for 30 days is part of Biznsbook sign-in security for every user on every plan, with each sign-in, failure and change recorded in the security audit log.
MFA uses an authenticator app; SMS and email codes, security keys and passkeys are not supported for sign-in. Customer, owner and supplier portals use their own sign-in.
Suggested implementation timeline
- Day 1: Administrators and finance users turn on MFA from My account and save their backup codes.
- Week 1: Ask the rest of the team to turn it on, and agree who may reset MFA for a user.
- Week 2: Require MFA for administrator roles on the Session Security page.
- Ongoing: Review MFA events in the security audit log and remind users to keep backup codes current.
What the sign-in looks like afterwards
After your password, Biznsbook shows a Two-step verification screen. Open the authenticator app, read the current code for Biznsbook, type it and click Verify and sign in. Codes change every 30 seconds, so if one is about to expire, wait for the next.
If you tick Remember this device for 30 days, that browser skips the code until the 30 days are up. Use it only on a computer that only you use. Turning MFA off or on again ends it on every browser.
If you do not have your phone, the same screen has a link to use a backup code instead.
Keeping your backup codes safe
The eight backup codes are your way back in if the phone is lost, broken or replaced. Each code works once. A password manager is the best place for them; a printed copy in a locked drawer also works.
The Manage MFA page shows how many unused codes you have left, and warns you when only a couple remain. Create new backup codes replaces the set, so save the new codes straight away; the old ones stop working at once.
Biznsbook stores backup codes as one-way hashes, so nobody can read them back, including Biznsbook staff.
Changing phones and turning MFA off
Many authenticator apps can move accounts to a new phone. If yours cannot, go to Manage MFA, choose Turn off MFA, confirm with a code from the old phone or a backup code, and then set it up again on the new phone. You get a new set of backup codes.
Turning MFA off always asks for a current app code or an unused backup code first, so someone who walks up to an unlocked screen cannot quietly remove it. You are emailed whenever MFA is turned on or off.
If your administrator requires MFA for your role, the Turn off MFA option is not available to you.
Metrics to track monthly
- Users with MFA on
- Administrators without MFA
- Account lockouts this month
- MFA resets by administrators
Start with three metrics; trend direction matters more than a single point-in-time snapshot.
Password-only sign-in vs Biznsbook MFA
Compare password-only sign-in with Biznsbook QR code setup and the related sign-in protections.
| Capability | Manual / Spreadsheet | Biznsbook |
|---|---|---|
| Adding the account | ❌ Type a long key by hand | ✅ Scan a QR code, or copy the key with one click |
| Confirming it works | ❌ Hope for the best | ✅ MFA turns on only after a valid code |
| Backup codes | ❌ Easy to lose | ✅ Shown once with copy, download and print |
| Help while setting up | ❌ Search the web | ✅ Guide panel with common questions on the page |
| Status | ❌ Unclear | ✅ On or Off badge on My account |
| Confirmation | ❌ None | ✅ Email when MFA is turned on |
A one-minute check after setup
Sign out and sign in again to see the code step working. Confirm the My account card shows On, check that the confirmation email arrived, and make sure the backup codes are saved somewhere other than the phone that runs the authenticator app.
Write the MFA and recovery routine into your onboarding notes for new users.
Frequently asked questions
Where do I turn on MFA in Biznsbook?
Open your name menu, choose My account, and click Set up MFA on the Multi-factor authentication card.
Why does it say the code did not match?
Codes depend on the time. Set your phone's date and time to automatic, then enter the newest code, and make sure you picked the Biznsbook entry in the app.
Can I see my backup codes again later?
No. They are shown once. If you lose them, create a new set from Manage MFA; the old set stops working.
How do I sign in after setup?
Enter your email and password, then type the current code from your authenticator app on the Two-step verification screen and click Verify and sign in.
How long does Remember this device last?
30 days on that browser. Only tick it on a computer you trust. Turning MFA off or on again ends it.
How do I turn MFA off?
Go to Manage MFA and click Turn off MFA, then enter a current app code or an unused backup code. If your role requires MFA you cannot turn it off yourself.
How this differs by industry
Retail
A store manager sets up MFA in a minute at the start of a shift and keeps the backup codes in the company password manager.
Wholesale & distribution
A sales administrator who changes phones moves the account in the authenticator app, then creates a fresh set of backup codes.
Manufacturing
A production planner who shares an office PC leaves Remember this device unticked and types the code at each sign-in.