How can we help you?

2FA adds a second step to signing in, on top of your password — usually a one-time code from an authenticator app. An attacker then needs more than just your password to get into your account.

An authenticator app generates time-based one-time passwords (TOTP) on your device. You scan a QR code once, and it produces a fresh 6-digit code every 30 seconds — no internet required.

Even if your password is leaked or guessed, your account stays protected because the attacker can't produce your one-time code. It's one of the most effective ways to prevent account takeover.

Open the security settings of the service, choose “Authenticator app”, then scan the QR code with the Authenticator ℠ App to start generating codes. See the per-service guides in our Services directory.

When enabling 2FA, the service shows a QR code plus a “can’t scan / manual entry” option that reveals a text secret key. Enter that key in the app if you can’t scan.

Open the menu, choose “New Group”, give it a name, then drag accounts into it to keep related codes together.

Your profile QR code lets you quickly sync the app to another of your devices. Find it under Settings → Profile.

Use Settings → Import/Export to import from another app, or re-add each account by disabling and re-enabling 2FA on each service.

Add your accounts to the app, verify a generated code works, then remove SMS as the default 2FA method in each service’s security settings.

Open the group, choose Share, and send the secure link to a trusted person or to another of your own devices.

In Facebook → Settings → Security → Two-factor authentication, choose “Authentication app”, then scan the QR code with the Authenticator ℠ App.

In Instagram → Accounts Center → Password and security → Two-factor authentication, pick “Authentication app” and scan the QR code.

Make sure iCloud sync is enabled and you’re signed in with the same Apple ID on each device. Sync can take a moment after adding a new account.

Your vault is end-to-end encrypted and backed up to your private iCloud, then synced automatically to your other devices.

Install the app, sign in with the same Apple ID, and your encrypted iCloud backup restores automatically.

Sync keeps your devices continuously in sync via iCloud; Transfer is a one-time move of your codes to a single new device.

Go to Settings → Import/Export to export an encrypted backup file, or import codes from another authenticator app.

Open Settings → Vaults, choose a primary vault, then move or merge your accounts into it.

Tap the vault name at the top of the screen and select another vault.

Open Settings → Sync; the vault ID shown should match on every device.

In Settings → Security, turn on Auto-Lock and choose how quickly the app should lock.

Go to Settings → Security → Change Password.

If you enabled iCloud backup you can restore after reinstalling. Otherwise the encrypted vault can’t be opened without the password — by design, for your security.

Enable “Unlock with Apple Watch” in the app’s Mac settings; it then unlocks automatically when your Watch is nearby.

Go to Settings → Security and turn off “Password Practice”.

Manage it from the App Store: Settings → your Apple ID → Subscriptions → Authenticator ℠ App → Cancel Subscription.

Long-press your Home Screen, tap +, search “Authenticator ℠ App”, and add the widget.

Install it via the Watch app; once synced, your codes appear right on your wrist.

Open the extension, scan the pairing QR code shown by the Mac app, and approve the connection.

In macOS System Settings → General → Login Items, add the Authenticator ℠ App.

Sign out and back into iCloud, make sure you have a network connection, then relaunch the app.

This means too many sync requests in a short time. Wait a few minutes and try again, or check your iCloud storage.