Two-factor authentication (2FA) protects your Billtobox account with a second check on top of your password: a code from an authenticator app on your smartphone. This article explains what 2FA is, what to do if you log in to the Billtobox app with itsme, how to activate 2FA and what to do if you lose your smartphone.
Do you log in to the Billtobox app with itsme? Do this before the end of December 2026.
As from December 2026, you may no longer be able to log in to the Billtobox app with itsme. On the website, logging in with itsme keeps working. Make sure that by then you log in with your email address and password, and protect your account with 2FA. Follow the steps under Switching from itsme to email address and password.
What is two-factor authentication and why set it up?
Two-factor authentication, 2FA for short, is a second check when you log in. On top of your password, you enter a code created by an authenticator app on your smartphone. That code changes every 30 seconds.
Many people use the same password on different websites. Anyone who gets hold of your password can then log in everywhere. With 2FA, nobody gets into your account without the code from your app, not even with your password. This keeps unauthorised people out of your Billtobox account.
What you need
Your Billtobox email address and password. Do you log in to the app with itsme? Then first follow the steps in the next section.
An email address or a mobile phone number where you can receive a code. You need it to set up your recovery channel before you can activate 2FA.
An authenticator app on your smartphone. Both apps below are free. Install one of them; you don't need to create an account in the app.
Google Authenticator: App Store (iPhone) or Google Play (Android)
Microsoft Authenticator: App Store (iPhone) or Google Play (Android)
A computer or tablet as well as your smartphone. You use your smartphone to scan a QR code shown on the other screen.
Switching from itsme to email address and password
Do you log in to the Billtobox app with the Itsme button? Then go through these three steps first. Allow about fifteen minutes to set this up the first time.
1. Find the email address of your Billtobox account
You will log in with an email address. This is:
the email address you used to create your Billtobox account, or
the email address you use in itsme, if you created your account with itsme.
Don't remember which email address belongs to your account? Our support team can look it up for you. Just give them your company name and VAT number.
2. Reset your password
Everyone who switches from itsme sets a new password. You do this with Forgot Password?:
Go to https://platform.billtobox.be and click Log in. The login page opens.
Under Password, click Forgot Password?
Enter the email address from step 1 and click Send.
You receive an email with a code. Enter that code, then choose a new password.
3. Log in with your email address and password
Go to https://platform.billtobox.be, click Log in, enter your Email address and your new Password, and click Log in. From then on, log in to the Billtobox app this way. On the website, you can keep using the Itsme button on the login page.
Then set up your recovery channel and activate 2FA, as described in the next two sections.
Setting up your recovery channel
Your recovery channel is an email address or a phone number that gets you back into your account if you lose your smartphone. You need a verified recovery channel before you can activate 2FA. Until then, the 2FA settings don't appear.
In Billtobox, click your initials at the top right and click Password and security. The Signing in page opens in a new tab.
Under Your recovery channel, enter an email address next to Email and click Send validation code. You can also use your phone number: enter it next to Phone number and click Send validation code.
The Verify your email address window opens. Enter the 6-digit code you receive and click Confirm. The code is valid for 30 minutes. No code? Click Click here to request a new one.
Your email address is marked Verified email address.
The recovery email address must be different from the address you log in with.
Activating 2FA
Once your recovery channel is verified, you link your authenticator app from the same page:
Refresh the Signing in page. The Two-factor authentication section appears at the bottom.
Next to Authenticator application, click Set up Authenticator application.
You may be asked to log in again first. If so, enter your Email address and Password and click Log in.
The Mobile Authenticator Setup page opens. A name is already filled in under Device Name. You can keep it or change it. This name is how you recognise your app later in your settings.
Open the authenticator app on your smartphone and scan the QR code on your screen.
Your app shows a six-digit code. Enter that code under Verify your mobile authenticator and click Send.
Unable to scan?
Click Unable to scan? and type the key shown under Enter the key: into your app. Click Scan barcode? to go back to the QR code.
2FA is active. You are taken back to the Signing in page, where your app is listed under Two-factor authentication. Every time you log in after this, you enter the code from your authenticator app after your password.
Logging in with 2FA
After your email address and password, the Two factor authentication page opens:
Open your authenticator app and enter the six-digit code shown for Billtobox.
Working on your own computer? Tick Remember two factor authentication on this device for 30 days. You then won't be asked for a code on that device for 30 days.
Click Log in.
No longer have access to your authenticator app?
Have you lost your smartphone, or do you have a new device without your authenticator app? Then log in through your recovery channel and link a new app afterwards.
Log in with your email address and password as usual.
On the Two factor authentication page, click Recover (next to Troubles with your two factor authentication?).
You receive a recovery code on your recovery channel. Enter that code. A page opens where you can link a new app straight away, or skip this step for now and log in.
Once you are logged in, click your initials at the top right, then Password and security.
Under Two-factor authentication, remove your old authenticator app with Delete and confirm.
Click Set up Authenticator application and link your new smartphone as described under Activating 2FA.
Managing 2FA in Password and security
You can always find your 2FA settings via your initials at the top right > Password and security, on the Signing in page under Two-factor authentication. There you can see which authenticator app is linked, link an app with Set up Authenticator application and remove an app with Delete.
Important: have you switched from itsme? Then don't remove your authenticator app. Without itsme, 2FA is what protects your account.
FAQ
I don't remember my email address. What should I do?
Our support team can look up which email address belongs to your account. Just give them your company name and VAT number.
I'm not receiving the email to reset my password.
Check your junk or spam folder. If nothing arrives, you may be using a different email address from the one on your account. Our support team can check which address belongs to your account. Just give them your company name and VAT number.
I don't see the Two-factor authentication section.
Check that your recovery channel is verified: under Your recovery channel, your email address must be marked Verified email address. Then refresh the Signing in page.
Which authenticator app should I use?
Google Authenticator (App Store, Google Play) or Microsoft Authenticator (App Store, Google Play). But any app that generates time-based codes works, such as FreeOTP.
I have a new smartphone or I lost my device. How do I get into my account?
Log in through your recovery channel and then link a new app. The steps are under No longer have access to your authenticator app?
Can I keep using itsme to log in?
On the website, yes: the Itsme button on the login page keeps working. In the Billtobox app, itsme will stop working from December 2026. So set up your password and 2FA before then, so you can always get into your account.
Do I still need itsme for Peppol?
Yes. To publish your company on Peppol or change its Peppol registration, you need to be logged in with itsme. To do this, log in on the website with the Itsme button. To find out how to link itsme to your account, see Linking itsme to your Billtobox account.
Does every user in our company have to activate 2FA separately?
Yes. 2FA belongs to your personal login, not to the company account. Each user links their own smartphone.