Bookmaker

Secure your account

Sign-in, password resets, two-factor authentication and recovery codes, and what support access means.

Your Bookmaker account holds your customers' details and your financial documents, so protect it the way you protect your bank login: a long unique password, and two-factor authentication on top.

Sign in#

Sign in with your email and password, or with Continue with Google. Tick Remember me on a device you trust to stay signed in for 30 days; otherwise you are signed out after 24 hours.

After five wrong passwords in a row, the account locks for 15 minutes and says "Account locked. Try again in a few minutes." This stops anyone guessing your password.

Reset a forgotten password#

  1. On the sign-in page, choose Forgot password?.
  2. Enter your email address and choose Send reset link.
  3. Open the link in the email and choose a new password of at least 12 characters.

For your privacy, the page always says "If that address has an account, a reset link is on its way", whether or not the address is registered. The link lasts one hour and works once. Setting a new password signs you in on that device, signs out every other session, disconnects your connected AI apps and clears any lockout.

Turn on two-factor authentication#

Two-factor authentication asks for a six-digit code from an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password, every time you sign in. Someone who learns your password still cannot get in without your phone.

Two-factor authentication is set up per member, on Settings › Security.
  1. Open Settings › Security and choose Set up two-factor.
  2. Confirm your password. Accounts that only use Google skip this step.
  3. Scan the QR code with your authenticator app. If you cannot scan, choose Can't scan? Enter this key instead and type the key.
  4. Enter the 6-digit code the app shows and choose Turn on two-factor.
  5. Save your ten recovery codes with Download codes, then choose I have saved them.

Two-factor applies to you alone. Every member turns it on for their own account, and no role can turn it on or off for someone else.

Sign in with two-factor#

After your password, or after Google, Bookmaker asks for the code from your authenticator app. If you have lost your phone, choose Lost your phone? Use a recovery code and enter one of your codes.

After five wrong codes, sign-in pauses for 15 minutes. The code step also expires after 10 minutes; if it does, sign in again from the start.

Settings › Security shows how many recovery codes you have left. Generate new codes replaces them all, and the old codes stop working, so do it when you are running low or think a code has been seen.

Turn two-factor off#

On Settings › Security, turn two-factor off with your password and a current code from your authenticator app. A recovery code is not accepted here.

When Bookmaker support helps you#

To contact Bookmaker support, email [email protected] with Bookmaker in the subject line, or use Contact support in the Help menu (the account menu on a phone). A support engineer may open a support session in your organization to see what you see. A session:

  • must record the reason it was opened;
  • acts with the permissions of a member of your organization and ends automatically after 30 minutes;
  • cannot download PDFs, export ZIP or CSV files, create or switch organizations, or reset passwords;
  • is recorded in Bookmaker's internal audit log.

Anything changed during a session appears in your activity log under the member whose access was used.

Last reviewed