Hardware token for Bexio two-factor authentication

 en français

Bexio is a Swiss cloud-based accounting solution for small businesses and self-employed individuals. It is appropriate for all industries and offers bookkeeping, billing and invoicing. You can set up two-factor authentication in bexio with the add-on "Google Authenticator". The add-on is developed to allow using Google Authenticator app as the second factor to log in to your bexio account, but with Token2 programmable tokens, you also have an option of using a programmable hardware token as our programmable tokens can be used as a drop-in replacement of TOTP mobile apps.

Requirements

You will need a bexio account, a Token2 programmable token and a device with NFC chip to run the NFC burner app for token provisioning. The NFC burner app is needed only for initial provisioning, the subsequent logins can be done using the hardware token only. We have NFC burner apps available for Android (with NFC chip), Windows (a separate NFC device needed if not built-in) and iPhones (iPhone 7 or newer, only with part numbers ending with "-i" ).

Activate the "Google Authenticator"  add-on

Activate the  "Google Authenticator" add-on under: "Settings - Packages / add-ons / users" -> "Add-ons".

Set up the add-on in bexio

Click on "Activate" to the right of Google Authenticator

Scan the QR code shown on the bexio page and use an NFC Burner app to provision the hardware token. Once done, press the button on the hardware token and enter the code generated by the token into the 'Code' text field

If the setup is successful you will receive a confirmation that the extended login procedure has been successfully activated. 

After this, every time you log in you will be asked to enter the Google Authenticator code in addition to your usual access data.