Two-step login: a step-by-step guide

Optional, free, and about 2 minutes to set up.

What it is. Normally you log in with your email and password. With two-step login turned on, Receipt Book also asks for a 6-digit code from an app on your phone. The code changes every 30 seconds. So even if someone steals or guesses your password, they can't open your account without your phone.

Who should turn it on. Everyone who keeps real invoices and customers in Receipt Book, and especially if you use the same password anywhere else, share a computer, or log in from shops or cafés.

Step 1 — Install an authenticator app

Install one of these free apps on your phone. Use the official store links so you get the real app:

Any app that supports "TOTP" or "time-based codes" works too (for example a password manager with codes built in). You only need one.

Step 2 — Turn it on in Receipt Book

1. Log in to Receipt Book on your computer or a second device, and go to Settings → Account → Two-step login (open it).
2. A QR code appears. On your phone, open the authenticator app and tap + (or Add account), then Scan a QR code, and point the camera at the code on screen.
   • Setting up on the same phone? Tap Can't scan it? Type this key instead, then in the app choose Enter a setup key. Type Receipt Book as the name, the key shown, and choose Time based.
3. The app now shows Receipt Book with a 6-digit code. Type that code and your password into Receipt Book and press Turn on two-step login.

If it says the code isn't right, check your phone's time is set automatically (Settings → Date & time → Automatic) and use a fresh code.

Step 3 — Save your backup codes

Right after you turn it on, Receipt Book shows 10 backup codes (they look like K7QM-2XPA-9D). Each one lets you log in once if you don't have your phone. They are shown only this one time, so save them before you leave the page:

• Download as a file and keep it somewhere other than your phone (a USB drive, or your email to yourself).
• Print them and keep the paper with your important business papers.
• Or Copy them into a password manager.

Then tick I've saved my backup codes somewhere safe and press Done. Don't keep the codes only on the phone that has your authenticator app — if you lose it, you lose both.

Logging in with two-step login

1. Type your email and password as usual.
2. Receipt Book asks for your code. Open the authenticator app and type the 6-digit code shown for Receipt Book.
3. Tick Keep me logged in on your own devices, so you aren't asked every time.

Getting a new phone

Before you reset or give away your old phone: log in, go to Settings → Account → Two-step login, turn it off, then turn it on again and scan the new QR code with your new phone. Some apps (like Microsoft Authenticator or Google Authenticator with a Google account) can also move your codes to a new phone for you.

Lost your phone?

1. On the login page, after your password, type one of your backup codes instead of the 6-digit code.
2. Once you're in, go to Settings → Account → Two-step login. Turn it off and on again with your new phone, or make new backup codes.

No phone and no backup codes? For your safety we can't switch it off just because someone asks. Email [email protected] from your account's email address. We'll check it's really you before helping, which can take a few days.

Turning it off

Go to Settings → Account → Two-step login, type your password and a current code (or a backup code), and press Turn off. You can turn it on again any time.

Keeping your account safe

• We will never ask for your code by phone, WhatsApp, SMS or email. Anyone who does is trying to break into your account.
• Use a password you don't use anywhere else.
• Your codes are made on your phone; Receipt Book only stores an encrypted key to check them, and your backup codes only in scrambled (hashed) form.

Create your free account Log in to turn it on