Two-Factor Authentication (2FA) adds an extra layer of security to your Invoice Genie account. With 2FA enabled, you’ll need both your password and a one-time verification code to sign in — so even if someone gets your password, they can’t access your account. This guide walks you through setting it up, using it, and managing it.
Before You Begin
- 2FA is available to all Invoice Genie users — no PRO subscription required.
- You can choose from three verification methods: SMS, Email, or an Authenticator App.
- If you choose the Authenticator App method, download one of these free apps first:
- Google Authenticator (iOS / Android)
- Authy (iOS / Android / Desktop)
- Any TOTP-compatible authenticator app
Step 1: Open Security Settings
- Tap your profile avatar (the circle with your initials) in the top-right corner of the screen.
- In the Account menu, find the Personal section.
- Tap “Two-Factor Authentication” (shown with a shield lock icon).
This opens the Security screen, where you’ll see a toggle for Two-Factor Authentication.
Step 2: Turn On Two-Factor Authentication
- On the Security screen, flip the Two-Factor Authentication toggle to ON.
- You’ll be taken to the “Set Up Two-Factor Authentication” screen.
Here you’ll choose how you want to receive your verification codes. There are three options:
| Method | How It Works | Best For |
|---|---|---|
| SMS | Receive a code via text message | Users who always have their phone nearby |
| Receive a code via email | Users who prefer email verification | |
| Authenticator App | Generate codes in an app like Google Authenticator | Maximum security (codes are generated offline) |
Tap the method you’d like to use. The next steps depend on which one you choose.
Option A: Set Up with SMS
Enter Your Phone Number
- On the “Verify Your Phone Number” screen, enter the phone number where you’d like to receive verification codes.
- The number is automatically formatted as you type (e.g., (555) 123-4567).
- Tap “Send Code”.
A 6-digit verification code will be sent to your phone via text message.
Enter the Verification Code
- You’ll see 6 digit boxes on screen. Enter the code from your text message.
- If your iPhone offers to auto-fill the code from the text message, tap it to fill automatically.
- Once all 6 digits are entered, verification starts automatically — or tap “Verify & Enable”.
Didn’t receive the code? Wait 30 seconds, then tap “Resend Code” to get a new one. Codes expire after 10 minutes.
Option B: Set Up with Email
Enter Your Email Address
- On the “Verify Your Email” screen, enter the email address where you’d like to receive verification codes.
- Tap “Send Code”.
A 6-digit verification code will be sent to your email inbox.
Enter the Verification Code
- Check your email for the code (check your spam/junk folder if you don’t see it right away).
- Enter the 6-digit code in the digit boxes on screen.
- Verification starts automatically once all digits are entered.
Didn’t receive the code? Wait 30 seconds, then tap “Resend Code”. Make sure to check your spam folder.
Option C: Set Up with an Authenticator App
This is the most secure option because codes are generated on your device and work even without an internet connection.
Scan the QR Code
- After selecting “Authenticator App”, you’ll see a QR code on screen.
- Open your authenticator app (e.g., Google Authenticator) on this or another device.
- In the authenticator app, tap “+” or “Add Account” and choose “Scan QR Code”.
- Point your camera at the QR code displayed in Invoice Genie.
- The authenticator app will add an entry called “InvoiceGenie” with your email address.
Can’t Scan the QR Code?
Below the QR code, you’ll see a manual entry key — a string of letters and numbers. You can tap and copy this key, then in your authenticator app choose “Enter a setup key” instead of scanning.
Enter the Code from Your App
- Your authenticator app will now show a 6-digit code that refreshes every 30 seconds.
- Enter the current code in the digit boxes on the Invoice Genie setup screen.
- Verification starts automatically once all digits are entered.
Step 3: You’re All Set!
Once your code is verified — regardless of which method you chose — you’ll see a green shield checkmark with a confirmation that two-factor authentication is enabled.
The screen automatically returns to the Security Settings, where you’ll see:
- The Two-Factor Authentication toggle switched ON
- A subtitle showing your active method:
- SMS: Your masked phone number (e.g., ***-***-1234)
- Email: Your masked email (e.g., k***@example.com)
- Authenticator: “Authenticator App Enabled”
Signing In with 2FA
Now that 2FA is enabled, here’s what happens when you sign in:
- Enter your email and password as usual on the login screen.
- A verification screen will appear asking for your 6-digit code:
- SMS: A code is automatically sent to your phone. Your iPhone may offer to auto-fill it.
- Email: A code is sent to your email address.
- Authenticator: Open your authenticator app and enter the current code.
- Enter the 6-digit code in the digit boxes.
- Once verified, you’ll be signed in as normal.
Tip: If you’re using SMS, your iPhone can auto-fill the code from the text message — just tap the suggestion that appears above the keyboard.
A countdown timer shows how long the code is valid. If the code expires, tap “Resend Code” for a new one (SMS and Email methods) or wait for your authenticator app to generate a fresh code.
Turning Off Two-Factor Authentication
If you ever need to disable 2FA:
- Go to Security Settings (Profile avatar → Two-Factor Authentication).
- Flip the Two-Factor Authentication toggle to OFF.
- A confirmation dialog will appear: “Are you sure you want to disable two-factor authentication? Your account will be less secure.”
- Tap “Disable”.
- Enter your account password to confirm.
- Tap “Confirm”.
2FA will be turned off and you’ll sign in with just your email and password going forward.
Note: Disabling 2FA requires your password for security. This prevents anyone who has temporary access to your unlocked phone from removing the protection.
Troubleshooting
I didn’t receive my SMS or email code
- Wait 30 seconds and tap “Resend Code”.
- For SMS: Make sure the phone number is correct and your phone has signal.
- For email: Check your spam/junk folder.
- Codes expire after 10 minutes. If it’s been longer, request a new one.
My code isn’t working
- Make sure you’re entering the most recent code (older codes become invalid).
- For authenticator apps: Make sure the time on your device is accurate. Authenticator codes rely on your device clock being in sync.
- You have up to 5 attempts per code. After 5 failed attempts, you’ll need to start over.
I lost access to my authenticator app
If you can no longer access your authenticator app (e.g., lost phone, deleted the app), please contact Invoice Genie support for assistance with account recovery. We recommend keeping your authenticator app backed up — apps like Authy offer cloud backup for this reason.
The QR code isn’t loading
If the QR code doesn’t appear, you can use the manual entry key shown below it. Copy the key and paste it into your authenticator app’s manual entry option.
Which Method Should I Choose?
| Method | Security Level | Convenience | Requires |
|---|---|---|---|
| SMS | Good | Very Easy — codes arrive automatically | Phone with cellular signal |
| Good | Easy — check email for codes | Access to your email | |
| Authenticator App | Best | Easy once set up — open the app for codes | An authenticator app installed |
For most users, SMS is the easiest to set up and use. For the highest level of security, we recommend an Authenticator App — codes are generated offline on your device and can’t be intercepted.
Summary
Two-Factor Authentication keeps your Invoice Genie account safe from unauthorized access. Here’s a quick recap:
- Open Security Settings from your profile menu
- Turn on the Two-Factor Authentication toggle
- Choose your method — SMS, Email, or Authenticator App
- Verify with a 6-digit code to complete setup
- Sign in as usual — just enter the extra code when prompted
It takes less than a minute to set up and protects your business data every time you sign in. We strongly recommend enabling 2FA for all users in your organization.
