Two-factor authentication (2FA) protects your Billtobox account with a second check on top of your password: a code from an authenticator app on your smartphone. This article explains what 2FA is, what to do if you currently log in with itsme, how to activate 2FA and what to do if you lose your smartphone.
Do you log in with itsme? Do this before the end of September 2026.
From the end of September 2026, you may no longer be able to log in to Billtobox with itsme. Make sure that by then you log in with your email address and password, and protect your account with 2FA. Follow the steps under Switching from itsme to email address and password.
What is two-factor authentication and why set it up?
Two-factor authentication, 2FA for short, is a second check when you log in. On top of your password, you enter a code created by an authenticator app on your smartphone. That code changes every 30 seconds.
Many people use the same password on different websites. Anyone who gets hold of your password can then log in everywhere. With 2FA, nobody gets into your account without the code from your app, not even with your password. This keeps unauthorised people out of your Billtobox account.
What you need
Your Billtobox email address and password. Do you currently log in with itsme? Then first follow the steps in the next section.
An authenticator app on your smartphone. Both apps below are free. Install one of them; you don't need to create an account in the app.
Google Authenticator: App Store (iPhone) or Google Play (Android)
Microsoft Authenticator: App Store (iPhone) or Google Play (Android)
A computer or tablet as well as your smartphone. You use your smartphone to scan a QR code shown on the other screen.
Switching from itsme to email address and password
Do you currently log in with the Itsme button? Then go through these three steps first. Allow about fifteen minutes to set this up the first time.
1. Find the email address of your Billtobox account
You will log in with an email address. This is:
the email address you used to create your Billtobox account, or
the email address you use in itsme, if you created your account with itsme.
Don't remember which email address belongs to your account? Our support team can look it up for you. Just give them your company name and VAT number.
2. Reset your password
Everyone who switches from itsme sets a new password. You do this with Forgot Password?:
Go to https://platform.billtobox.be. The login page opens.
Under Password, click Forgot Password?
Enter the email address from step 1 and click Send.
Open the email you receive and choose a new password.
3. Log in with your email address and password
Go to https://platform.billtobox.be, enter your Email address and your new Password, and click Log in. From then on, log in this way, not with the Itsme button at the top of the login page.
Straight after you log in, the Activate two factor authentication page opens. Follow the steps in the next section.
Activating 2FA when you log in
When you log in with your email address and password and don't have 2FA yet, Billtobox shows the Activate two factor authentication page. You must activate 2FA to continue: if you click Cancel, you go back to the login page. Link your authenticator app as follows:
A name is already filled in under Device Name. You can keep it or change it.
Open the authenticator app on your smartphone and scan the QR code on your screen.
Unable to scan?
Click Unable to scan? and type the key into your app. Your app then shows a six-digit code. Enter that code under Verify your mobile authenticator. Click Send.
2FA is active. Every time you log in after this, you enter the code from your authenticator app after your password.
Checking your recovery channel
Your recovery channel is an email address and a phone number that get you back into your account if you lose your smartphone. Check it straight after activating 2FA.
In Billtobox, click your initials at the top right and click Password and security.
A new page opens. In the left menu, click Account security and then Signing in.
Look under Your recovery channel. Are your email address and your phone number both marked as verified? Then everything is in order.
Is your phone number missing? Enter it and click Send validation code. Enter the code you receive by text message and click Confirm.
Tip: choose a recovery email address that is different from the address you log in with. That way, you can still get into your account if you can no longer read the emails sent to your login address.
No longer have access to your authenticator app?
Have you lost your smartphone, or do you have a new device without your authenticator app? Then log in through your recovery channel and link a new app afterwards.
Log in with your email address and password as usual.
On the page where you have to enter the 2FA code, click Recover.
You receive a recovery code on your recovery channel (email or text message). Enter that code. You are logged in.
Click your initials at the top right, then Password and security, and in the left menu Account security > Signing in.
Under Two-factor authentication, remove your old authenticator app with Delete.
Click Set up Authenticator application and link your new smartphone as described under Activating 2FA when you log in.
Managing 2FA in Password and security
You can always find your 2FA settings via your initials at the top right > Password and security > Account security > Signing in, under Two-factor authentication. There you can see which authenticator app is linked, link an app with Set up Authenticator application and remove an app with Delete.
Important: do you currently log in with itsme? Then don't remove your authenticator app. Without itsme, 2FA is what protects your account.
FAQ
I don't remember my email address. What should I do?
Our support team can look up which email address belongs to your account. Just give them your company name and VAT number.
I'm not receiving the email to set my password.
Check your junk or spam folder. If nothing arrives, you may be using a different email address from the one on your account. Our support team can check which address belongs to your account. Just give them your company name and VAT number.
Which authenticator app should I use?
Google Authenticator (App Store, Google Play) or Microsoft Authenticator (App Store, Google Play). Billtobox itself also mentions FreeOTP. Any app that generates time-based codes works.
I have a new smartphone or I lost my device. How do I get into my account?
Log in through your recovery channel and then link a new app. The steps are under No longer have access to your authenticator app?
Can I keep using itsme to log in?
Until you switch, or until the end of September 2026, you can keep logging in with the Itsme button. Still, set up your password and 2FA right away, so you can always get into your account.
Does every user in our company have to activate 2FA separately?
Yes. 2FA belongs to your personal login, not to the company account. Each user links their own smartphone.