What this helps you do

Require a second, changing six-digit code after the password, so a stolen password alone cannot open the account.

Before you start

Install an authenticator app on a device you control. Keep your current Upstorr password ready.

Steps

  1. Open Account and find Two-factor authentication (2FA).
  2. Enter the current password and select Setup.
  3. Add the displayed setup key or setup link to your authenticator app.
  4. Enter the six-digit code currently shown by the authenticator.
  5. Select Verify and Enable.
  6. Copy every recovery code and keep them somewhere safe outside the device used for the authenticator.
  7. Select I saved them after you have genuinely stored them.

Recovery codes

Each recovery code works only once. Use one when you cannot access the authenticator. Recovery codes remaining tells you how many unused codes are left.

To make a fresh set, enter the current password and a current six-digit authenticator code, then select Regenerate Codes. The new set replaces the old recovery codes, so store the new ones immediately.

To disable 2FA, enter the current password and use exactly one verification method: either a six-digit authenticator code or one recovery code. Do not fill both.

What happens next

Future sign-ins require the password and the second code. The page records when 2FA was enabled, when it was last verified, and how many recovery codes remain.

Common problems

  • Verify and Enable is unavailable: enter all six digits from the authenticator.
  • The code is rejected: use the newest code before it changes and check that the phone's date and time are automatic.
  • Setup expired: cancel or restart setup to receive a new setup session.
  • Security changes are disabled: use Retry until the current 2FA status loads safely.
  • You lost the authenticator: use an unused recovery code. If neither is available, contact Upstorr support.