Account protection

Two-step authentication

Two-step verification is available on every TIM4biz account by default. When enabled, signing in with your username and password also requires a one-time numeric code generated by an authenticator app on your phone.

Enable on your account → Security overview

Protecting your account

When used, you sign in as usual and are then required to supply the authentication code from the authenticator app on your phone. The code rotates every 30 seconds, so even if your password were compromised, an attacker would also need physical access to your authenticator device.

Sign in

Enter your username and password on the TIM4biz sign-in page as you normally would.

Open your authenticator

Open the authenticator app on your phone and locate your TIM4biz entry.

Enter the code

Type the 6-digit one-time code displayed by your app to complete sign-in.

First-time setup

On the first sign-in after two-step authentication is enabled or reset, a unique code is computed and displayed. This code is used to add your account to your authenticator app. Your unique code is displayed as a QR code that can be scanned for easy installation, and as text that can be manually entered if your app does not support scanning.

In your authenticator app, tap + or Add account and open the barcode scanner.
Scan the QR code displayed on the TIM4biz sign-in page.
Your TIM4biz account is added to the app and a one-time code appears.
Enter the code on the sign-in page to confirm setup.

JBSW Y3DP EHPK 3PXP

Sample QR & manual seed (illustrative only).

Two-step vs two-factor

The terms are often used interchangeably, but there is a subtle distinction worth understanding.

Two-factor (2FA)

Two different types of authentication

What you are — fingerprint or iris scan
What you know — password or secret phrase
What you carry — identification or swipe card

Two-step verification

Same type from two different providers

A password you know
Plus a one-time code from a security token or authenticator app
Both factors are something you know or can read, from independent sources

Authenticator apps

Using the standard time-based One-time Password Algorithm (TOTP) and HMAC-based One-time Password algorithm (HOTP), the TIM4biz two-step code is compatible with the major authenticator apps you may already have installed:

Google AuthenticatoriOS & Android

LastPass AuthenticatoriOS & Android

Microsoft AuthenticatoriOS & Android

Add an extra layer of protection

Enable two-step authentication today and dramatically reduce the risk of unauthorised access to your call accounting data.