Enabling Owner Two-Factor Authentication (TOTP) and Recovery Codes

To protect sensitive information such as revenue and customer contact details, we recommend enabling two-factor authentication (2FA) on your owner account. With 2FA turned on, even someone who has worked out your password can't sign in without the OTP code on your phone, which substantially lowers the risk of your salon's revenue data or customer contact details being exposed.

Note: 2FA in Biseo protects the owner account only — it is not a team-wide setting for staff logins.

1. Click your profile icon in the top-right corner of the screen and go to Me.
2. On the Security tab, select "Turn on two-factor authentication".
3. Scan the QR code shown on screen with an OTP app such as Google Authenticator to link your account. Once scanned, you'll be asked to enter the six-digit code the app is showing, which confirms the link worked before 2FA is switched on.
4. Important: Make sure to save the recovery codes shown on screen somewhere safe. They're the only way to regain access to your account if you lose your phone.

Example: Say an owner with 2FA enabled loses their phone and can no longer open Google Authenticator. Instead of entering an OTP code at login, they enter one of the recovery codes saved when 2FA was first set up, and that lets them back into the account. If those codes hadn't been saved anywhere, they'd have neither an OTP app nor a recovery code and would be locked out — which is why it's worth storing the recovery codes somewhere safe, such as a password manager, as soon as you set 2FA up.