Billing Portal Authentication

Every merchant using Billing Portal has a new “login screen” available at billingportal.com/s/shortname, where your “shortname” is your Chargify subdomain. If password logins are turned off, a customer can use the login screen to easily request a Login Link using their email address on file.

Password Authentication

If the merchant enables Password Logins in the Billing Portal settings, then the customer is prompted to choose a password after accepting their invitation. The customer uses their email address and password to log in via your site-specific login page located at: billingportal.com/s/shortname, where “shortname” is your Chargify subdomain. Once logged in, the customer can change the email address and/or the password.

Note: We do not recommend the use of both the “Password Logins” option and the “Low-Security Logins” at the same time. Password Logins address most of the concerns that led to the desire of Low-Security Logins, so we would pick one or the other. See “Billing Portal Login Flow” below for more information on Low-Security Logins.

Email-based Authentication

The Billing Portal does not require the customer to set or remember a password. Instead, everything they need to sign in is included in a variety of helpful e-mails:

  • Invite E-mail: You may choose to have all customers automatically invited to the Billing Portal or you may invite them manually. When the customer accepts an invitation, they will be signed in to the Billing Portal to be able to access their subscriptions. The invite e-mail is valid for 48 hours after it is sent. If a customer tries to use the invite after this time, they’ll be asked to generate a new invite.

  • Login E-mail: If the customer has not used the Billing Portal for an extended period of time, he or she may be asked to sign in again. From the login screen, the customer can request to receive a new login URL via email. This link is valid for 1 hour. This process is very similar to the common “Reset Password” procedure on most websites (and has a similar security profile).

  • Management URL: Included at the bottom of statements & invoices your customers receive is a link to manage their subscriptions. This link is good for 65 days. This link alone is not sufficient to sign a customer into their Billing Portal account, unless you choose to bypass email verification in your Billing Portal settings. If the customer has already signed in recently (from the methods above), they can access their subscription. If not, they will be asked to verify their identity with a new login e-mail (or entering a password, if password logins are enabled).

Password Logins

Your customers can log in to the Billing Portal using their email address and a password that they choose. Additionally, customers can log in, whether they are using newer passwords or the old email Login Links.

You can distribute links to these login screens to your customers. Additionally, when customers have subscriptions they manage with multiple businesses and grow accustomed to the idea of the “shortname”, they can visit billingportal.com and directly enter a shortname, or choose from businesses they’ve already authenticated.

After you enable password logins, your customers will be prompted to choose a password after they accept their invitation email. Your customer can add a password then, or anytime via the link on their “My Account” page.

The existing methods of Billing Portal logins — Management URLs, Login Links, and Invitations — will continue to work. Passwords just provide a method that is more familiar to many users. And, if your customers forget their password, we provide a handy forgotten password flow that allows them to access their account and set a new password after clicking a link in an email.

You can enable password logins for your Billing Portal today! Just head over to the Settings tab in Chargify and look for the new option, as pictured below. Passwords default to being enabled for new sites, but are disabled for existing sites so that you can opt-in.