Multi-factor authentication (MFA) is a security process that requires more than one method of authentication from independent credentials to verify your identity.

Multi-Factor Authentication adds an additional layer of security to your Bill.com account by requiring not only a username and password to log in, but also an additional code sent to your phone. This makes it extremely difficult to break into a Bill.com account.

Jump to:

• Setting up MFA
• Setting up a backup number
• When MFA is triggered
• Contacting Support if you can't login
• Things to know

Setting up MFA

MFA setup is part of account enrollment. When prompted:

1. Enter a cell or work phone number to receive security codes when needed
2. Choose the default method to receive codes
   • Via text
   • Via Phone Call
3. Click Send code
4. Enter the code sent to the phone number provided
5. Select Trust this device for 30 days to require a security code less often
6. Click Submit
   

Setting up a backup number

1. Click Settings
2. Click Security under You
3. Click Enter your backup phone
   • To edit the backup number, click Change Backup MFA
4. Click Next to receive a security code on your primary number
5. Enter the security code
6. Select Trust this Computer to require a security code less often
7. Click Submit
8. Enter the backup number
9. Select the default method to receive security codes
10. Click Submit
11. Enter the security code to verify the number
12. Click Submit
13. Click Finish

You can also use Google Authenticator as a backup method.

When MFA is triggered

You will be prompted with a text or a voice message to enter a code upon logging in to Bill.com, when changing your password, or when changing your phone number(s).

Checking the "Trust this computer" box when you enter a code will reduce the need of a code to every 30 days, except when changing your password or phone number(s).

Contacting Support if you can't login

If you can't access your primary or backup numbers, or you are not receiving codes after trying these tips, click Having trouble? and then Contact support.

Things to know

• It is best practice to not share numbers or use another person's phone number for MFA
• The number of times Send a new code will trigger a new code is 3, on the 4th attempt we will show some tips about how to ensure receiving the code successfully
  • Log out and back in to reset the MFA process
• To perform the security check less frequently, select the box to "trust" this computer
  • Do not select the "trust this computer" box when working on someone else's computer or logging in from a public location (like a library computer)
• For devices that you have marked as a trusted, the following conditions can still trigger MFA:
  • Changing your password
  • Changing your phone number(s)
  • Switching to a different browser
  • Disabling browser cookies, using a cookie management extension or clearing browser data
  • Changing the browser supported language, ie: adding a new language
  • Upgrading to a different version of the browser