Two-factor authentication (2FA)
Two-factor authentication adds a second verification step when you sign in, making it much harder for anyone to access your account even if your password is compromised.1
Go to account security settings
Click your profile icon in the top-right corner and select Account Security, or navigate to Settings → Security.
2
Enable two-factor authentication
Click Enable 2FA. You will be asked to verify your identity with your current password before proceeding.
3
Choose your 2FA method
Select one of the following verification methods:
- SMS OTP — A one-time code is sent to your registered mobile number each time you log in.
- Authenticator app — Use an app such as Google Authenticator or Authy to generate time-based codes. This method works without mobile signal.
4
Complete setup
Follow the on-screen instructions to verify your chosen method. For authenticator apps, scan the QR code displayed, then enter the 6-digit code shown in the app to confirm setup.Once enabled, you will be asked for a verification code every time you sign in.
Password best practices
A strong, unique password is your first line of defence.- Use at least 8 characters, with a mix of uppercase letters, lowercase letters, numbers, and special characters
- Do not reuse passwords from other services
- Avoid including your name, business name, or easily guessable personal information
- Consider using a password manager to generate and store complex passwords securely
- Change your password immediately if you suspect it has been compromised
Active sessions
You can see every device and browser that is currently signed in to your Aczen Bilz account.1
View active sessions
Go to Settings → Security → Active Sessions. Each session shows the device type, browser, approximate location, and the time of last activity.
2
Revoke a session
If you see a session you do not recognise, click Revoke next to it. The session is terminated immediately and that device is signed out.
3
Sign out of all sessions
To sign out of every device at once — for example if your laptop is lost or stolen — click Sign Out All Other Sessions.
Sessions automatically expire after 30 minutes of inactivity. You will see a warning 5 minutes before your session expires, giving you the option to stay signed in.
Security alerts
Aczen Bilz sends you an email alert whenever:- A sign-in occurs from a new device or location
- Your password is changed
- 2FA is enabled or disabled on your account
- A new team member is invited or added
How Aczen Bilz protects your data
256-bit SSL encryption
All data transmitted between your browser and Aczen Bilz servers is encrypted with 256-bit SSL — the same standard used by leading banks and financial institutions.
Encryption at rest
Your stored data, including business information, invoices, and financial records, is encrypted at rest so it cannot be read even if storage media is physically accessed.
24/7 security monitoring
Automated systems monitor your account around the clock for suspicious activity and unauthorised access attempts.
Secure infrastructure
Aczen Bilz runs on Tier-4 data centres with multi-layered physical and digital security controls, regular penetration testing, and redundant failover systems.
Compliance certifications
Aczen Bilz holds the following internationally recognised certifications:What Aczen Bilz will never ask for
To protect yourself from phishing:- Always verify the sender’s email address before clicking any link
- Access your Aczen Bilz account only by typing the URL directly into your browser or using a saved bookmark
- Never enter your credentials on a site reached through an unsolicited email or SMS link
