> ## Documentation Index
> Fetch the complete documentation index at: https://aczen-d43c4738.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.
# Secure your Aczen Bilz account with 2FA and best practices
> Enable two-factor authentication, manage active sessions, understand Aczen Bilz's encryption standards, and learn how to protect your account from fraud.
Aczen Bilz protects your business and financial data with multiple layers of security — from 256-bit SSL encryption and 24/7 activity monitoring to compliance with internationally recognised security standards. This page explains the security features available to you and the steps you can take to keep your account safe.
## Two-factor authentication (2FA)
Two-factor authentication adds a second verification step when you sign in, making it much harder for anyone to access your account even if your password is compromised.
Click your profile icon in the top-right corner and select **Account Security**, or navigate to **Settings → Security**.
Click **Enable 2FA**. You will be asked to verify your identity with your current password before proceeding.
Select one of the following verification methods:
* **SMS OTP** — A one-time code is sent to your registered mobile number each time you log in.
* **Authenticator app** — Use an app such as Google Authenticator or Authy to generate time-based codes. This method works without mobile signal.
Follow the on-screen instructions to verify your chosen method. For authenticator apps, scan the QR code displayed, then enter the 6-digit code shown in the app to confirm setup.
Once enabled, you will be asked for a verification code every time you sign in.
Save your backup codes in a safe place when you set up 2FA. If you lose access to your phone or authenticator app, backup codes are the only way to recover your account. Aczen Bilz support cannot bypass 2FA on your behalf.
## Password best practices
A strong, unique password is your first line of defence.
* Use at least 8 characters, with a mix of uppercase letters, lowercase letters, numbers, and special characters
* Do not reuse passwords from other services
* Avoid including your name, business name, or easily guessable personal information
* Consider using a password manager to generate and store complex passwords securely
* Change your password immediately if you suspect it has been compromised
To update your password, go to **Settings → Security → Change Password**.
## Active sessions
You can see every device and browser that is currently signed in to your Aczen Bilz account.
Go to **Settings → Security → Active Sessions**. Each session shows the device type, browser, approximate location, and the time of last activity.
If you see a session you do not recognise, click **Revoke** next to it. The session is terminated immediately and that device is signed out.
To sign out of every device at once — for example if your laptop is lost or stolen — click **Sign Out All Other Sessions**.
Sessions automatically expire after 30 minutes of inactivity. You will see a warning 5 minutes before your session expires, giving you the option to stay signed in.
## Security alerts
Aczen Bilz sends you an email alert whenever:
* A sign-in occurs from a new device or location
* Your password is changed
* 2FA is enabled or disabled on your account
* A new team member is invited or added
If you receive an alert for an action you did not take, revoke all active sessions immediately and change your password, then contact support.
## How Aczen Bilz protects your data
All data transmitted between your browser and Aczen Bilz servers is encrypted with 256-bit SSL — the same standard used by leading banks and financial institutions.
Your stored data, including business information, invoices, and financial records, is encrypted at rest so it cannot be read even if storage media is physically accessed.
Automated systems monitor your account around the clock for suspicious activity and unauthorised access attempts.
Aczen Bilz runs on Tier-4 data centres with multi-layered physical and digital security controls, regular penetration testing, and redundant failover systems.
## Compliance certifications
Aczen Bilz holds the following internationally recognised certifications:
| Certification | What it means for you |
| ----------------- | ------------------------------------------------------------------------------------ |
| **ISO 27001** | Systematic controls are in place to manage information security risks |
| **PCI DSS** | Payment card data is handled according to the highest industry standards |
| **SOC 2 Type II** | Security, availability, and confidentiality controls have been independently audited |
## What Aczen Bilz will never ask for
Aczen Bilz will **never** contact you by phone, email, or SMS to ask for:
* Your account password
* A one-time password (OTP) or 2FA code
* Your bank account credentials
* Remote access to your device
If anyone claims to be from Aczen Bilz and asks for any of the above, it is a phishing or fraud attempt. Do not provide the information. Report the incident immediately to **[security@aczen.tech](mailto:security@aczen.tech)**.
To protect yourself from phishing:
* Always verify the sender's email address before clicking any link
* Access your Aczen Bilz account only by typing the URL directly into your browser or using a saved bookmark
* Never enter your credentials on a site reached through an unsolicited email or SMS link
## Report a security issue
If you discover a security vulnerability or suspect that your account has been compromised, contact the Aczen Bilz security team immediately:
**Email:** [security@aczen.tech](mailto:security@aczen.tech)
Provide as much detail as possible — including any suspicious email content, URLs, or account activity you have observed. The security team will respond within one business day.