Skip to main content

Security & Authentication

BillManager supports social login (Sign in with Google or Apple) and two-factor authentication (2FA) to keep your account secure.

Social Login​

If your administrator has enabled social login, you can sign in using an existing account from a supported provider instead of entering a username and password.

Signing In with a Social Account​

  1. On the login page, click the provider button (e.g., Sign in with Google)
  2. You'll be redirected to the provider's login page
  3. Authorize BillManager to access your basic profile information (name and email)
  4. You'll be signed in automatically

If this is your first time logging in via a social provider and auto-registration is enabled, an account will be created for you automatically using your provider email address.

Linking Social Accounts​

Already have a BillManager account? You can link social providers to it for faster login:

  1. Go to Admin Panel → Security
  2. Scroll to the Linked Accounts section
  3. Click Connect next to any available provider
  4. Complete the provider's authorization flow
  5. The account is now linked — you can sign in with either method

Unlinking Social Accounts​

  1. Go to Admin Panel → Security → Linked Accounts
  2. Click Disconnect next to the provider you want to remove
warning

If you don't have a password set (i.e., you signed up via social login only), you must either set a password or keep at least one social account linked. BillManager won't let you remove your only way to sign in.

Two-Factor Authentication (2FA)​

Two-factor authentication adds a second verification step after entering your password, making it much harder for someone to access your account even if they know your password.

Available 2FA Methods​

MethodHow It Works
Email OTPA 6-digit code is sent to your email address
Passkey / WebAuthnUse a hardware security key, fingerprint, or face recognition
Recovery CodeA one-time backup code (for emergencies)

Enabling Email OTP​

  1. Go to Admin Panel → Security
  2. Click Enable Email OTP
  3. A verification code is sent to your email
  4. Enter the code to confirm setup
  5. Save your recovery codes — these are your backup if you lose access to your email
Save Your Recovery Codes

Recovery codes are shown only once during setup. Store them somewhere safe (password manager, printed copy in a secure location). Each code can only be used once. If you lose both your email access and recovery codes, you will be locked out of your account.

Enabling Passkeys​

If your administrator has enabled passkey support:

  1. Go to Admin Panel → Security
  2. Click Add Passkey
  3. Follow your browser's prompt to register a security key, fingerprint, or face recognition
  4. Give it a descriptive name (e.g., "MacBook Touch ID" or "YubiKey")

You can register multiple passkeys for redundancy.

Signing In with 2FA​

When 2FA is enabled, after entering your username and password (or signing in via social login), you'll see the verification page:

  1. Email OTP: Click "Send Code", check your email, enter the 6-digit code
  2. Passkey: Click "Use Passkey" and follow your browser's prompt
  3. Recovery Code: Click "Use Recovery Code" and enter one of your saved codes

Disabling 2FA​

  1. Go to Admin Panel → Security
  2. Click Disable 2FA
  3. Enter a verification code (sent to your email) to confirm

Security Best Practices​

  • Enable 2FA on your account, especially if you use the same password elsewhere
  • Use a passkey if available — they're phishing-resistant and more convenient than email codes
  • Store recovery codes in a password manager or printed in a secure location
  • Link multiple social accounts so you always have a backup way to sign in
  • Review your linked accounts periodically in Admin Panel → Security and remove any you no longer use