Two-Factor Authentication (2FA): Difference between revisions

From VRChat Wiki
← Older editNewer edit →
VisualWikitext
Tony Lewis (talk | contribs)
automoderated, Community Moderators, Interface administrators
899 edits
m Done Proofread Stage
DAG-XR (talk | contribs)
Community Moderators
2,079 edits
Proofread article; added See Also and References headings.
Line 2: Line 2:


==What is Two-Factor Authentication?==
==What is Two-Factor Authentication?==
'''Two-Factor Authentication (2FA)''' helps protect your account with an extra login step. After your username and password, you'll enter in a code generated by an app. Having a strong password is good, but sometimes it's not enough. Attackers can still guess, steal or trick you into revealing your password. With 2FA, as long as nobody else has your device, you can be sure that no one else can log in, even if they steal your password.
'''Two-Factor Authentication (2FA)''' helps protect your account with an extra login step. After submitting your username and password, you may be prompted to enter in a code generated by your authenticator app or e-mail address. By default, VRChat will have authentication codes sent to the same e-mail address used to create your [[VRChat account]].


While Two-Factor Authentication helps keep your account secure, you should always ensure you are using a strong password that you don't use elsewhere.
Having a strong password is recommended, however, attackers may eventually be able to guess, or be able to find out your password. With two-factor authentication, as long as nobody else has your device, you can be sure that no one else can log into your account, even if they steal your password.


==Setup.==
While two-factor authentication helps keep your account secure, you should always ensure you are using a unique, and strong password.
Here are some instructions to help you setup Two-Factor Authentication (2FA)
 
==Setup==
Here are some instructions to help you setup<ref>[https://docs.vrchat.com/docs/setup-2fa 'Two-Factor Authentication'] on ''docs.vrchat.com''; retrieved on February 15, 2025.</ref> Two-Factor Authentication (2FA)


#Go to the VRChat website and log in to your account.
#Go to the VRChat website and log in to your account.
Line 14: Line 16:
#Download any authenticator app. Authy is great it allows you to back up your accounts to their cloud using an encryption password, so your 2FA codes are safe. If you're worried about swapping devices or losing your phone, this is probably the best app to use.
#Download any authenticator app. Authy is great it allows you to back up your accounts to their cloud using an encryption password, so your 2FA codes are safe. If you're worried about swapping devices or losing your phone, this is probably the best app to use.
#then click next
#then click next
#Now you need to add your account to the authenticator app this is different on each app.
# Now you need to add your account to the authenticator app this is different on each app.
''If you are using Authy, click the three dots in the top right corner, select "Add Account," then scan the QR code on the website or choose "Enter key Manually" and input the code displayed.''
''If you are using Authy, click the three dots in the top right corner, select "Add Account," then scan the QR code on the website or choose "Enter key manually",  and input the code displayed.''
#The authenticator app should now show VRChat and a six digit code
#The authenticator app should now show VRChat and a six digit code
#The VRChat website will now ask for this code, copy the code from the authenticator app and enter it into the VRChat website
# The VRChat website will now ask for this code, copy the code from the authenticator app and enter it into the VRChat website
#now click "Verify"
#now click "Verify"
#If everything was done correctly, you will see a message saying, "You are protecting your account with an additional login step." If this is not the case, check the code again; it changes every thirty seconds. Also, make sure you typed the code correctly. On this screen, you'll also see some information about recovery codes. If you ever lose or damage your device, or otherwise can't get the authenticator codes, the recovery codes can help you log in.
#If everything was done correctly, you will see a message saying, "You are protecting your account with an additional login step." If this is not the case, check the code again; it changes every thirty seconds. Also, make sure you typed the code correctly. On this screen, you'll also see some information about recovery codes. If you ever lose or damage your device, or otherwise can't get the authenticator codes, the recovery codes can help you log in.
<center>'''DOWNLOAD YOUR RECOVERY CODES AND KEEP THEM SAFE. IF YOU DO NOT, YOU MAY PERMANENTLY LOSE ACCESS TO YOUR ACCOUNT''' </center>  
<center>'''DOWNLOAD YOUR RECOVERY CODES AND KEEP THEM SAFE. IF YOU DO NOT, YOU MAY PERMANENTLY LOSE ACCESS TO YOUR ACCOUNT.''' </center>  
if you are on mobile select enter code manually. From now on, whenever you are logging in, we may ask you for authenticator app code — especially if it looks like you are logging in from a new location or device.
if you are on mobile, select "Enter code manually". From now on, whenever you are logging in or applying a major update to the app, VRChat may ask for an authenticator app code.


==How to log into VRChat with your Authenticator App.==
==How to log into VRChat with your authenticator app==
===VRChat Client===
===VRChat client===
When you sign into your VRChat account after entering your Username and Password You may be prompted to enter a Two-Factor Authentication code. Here’s what to do:
When you sign into your VRChat account, after entering your username and password, you may be prompted to enter a Two-Factor Authentication code. Here’s what to do:
#Open the authenticator app.
#Open your authenticator app.
#Click on the field that says "Enter code here...".
#Click on the field that says "Enter code here..."
#Use the keypad to enter the six digit code on your authenticator app, then press OK.
#Use the keypad to enter the six digit code on your authenticator app, then press OK.
#Now press the verify button.
#Now press the verify button, if offered.
If this doesn't work check you have entered the code correctly and that it has not changed before you clicked ok, in case of emergency click "Use recovery code" but '''be careful each code can only be used once''' If you think you might have lost your authenticator app or its data permanently, sign into the VRChat website and disable Two-Factor Authentication.  
If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". '''Each recovery code can only be used once'''. If you do not have access to your authenticator app, or recovery codes, try to sign into the VRChat website and disable 'Two-Factor Authentication' in the Settings panel.  
===Website===
===Website===
when you sign into the VRChat website after entering your Username and Password You may be prompted to enter a Two-Factor authentication code. Here’s what to do:
When you sign into the VRChat website after entering your username and password, you may be prompted to enter a two-factor authentication code. Here’s what to do:  
#Open the authenticator app.
#Open the authenticator app.
#Click on the field that says "000 000".
# Click on the field that says "000 000".
#Enter a code from your authenticator app.
#Enter a code from your authenticator app.
#Now press the verify button.
#Now press the verify button.
If this doesn't work check you have entered the code correctly and that it has not changed before you clicked ok
If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". '''Each recovery code can only be used once'''. You may need to submit a [https://help.vrchat.com/hc/en-us/requests/new?ticket_form_id=1900000725685 support ticket] to VRChat if you are unable to find your recovery code.  
in case of emergency click "Use recovery code" but '''be careful each code can only be used once''' If you think you might have lost your authenticator app or its data permanently, disable Two-factor authentication until you can enable it again with a new device or app.  
===SDK===
===SDK===
when you sign into the VRChat SDK in a new project after entering your Username and Password You will be prompted to enter a Two-Factor authentication code. Here’s what to do:
When you sign into the VRChat SDK within a Unity project, you will be prompted to enter a two-factor authentication code. Here’s what to do:
#Open the authenticator app.
# Open the authenticator app.
#Click on the field that labeled "Code:".
#Click on the field that labeled "Code:".
#Enter a code from your authenticator app.
#Enter a code from your authenticator app.
#Now press the verify button.
#Now press the verify button.
If this doesn't work check you have entered the code correctly and that it has not changed before you clicked ok, in case of emergency click "Use recovery code" but '''be careful each code can only be used once''' If you think you might have lost your authenticator app or its data permanently, sign into the VRChat website and disable Two-factor authentication.  
If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". '''Each recovery code can only be used once'''. If you do not have access to your authenticator app, or recovery codes, try to sign into the VRChat website and disable 'Two-Factor Authentication' in the Settings panel.  
==What if you lose access to your authenticator app.==
==Losing access to your authenticator app==
If you lose the device with the authenticator app, or its data is deleted, you can still log into VRChat with a recovery code.  
If you lose the device with the authenticator app, or its data is deleted, you can still log into VRChat with a recovery code.
#First, find your recovery codes.
#First, find your recovery codes.
#Then, login to the VRChat website with your username and password. When you get to the Two-Factor Authentication screen, click on "Use a recovery code instead".
#Then, log in to the VRChat website with your username and password. When you get to the Two-Factor Authentication screen, click on "Use a recovery code instead".
#Enter one of your recovery codes into the field.
#Enter one of your recovery codes into the field.
#You should now be logged into VRChat.
#You should now be logged into VRChat.
if successful its recommended to delete or cross out the recovery code you have used since it can only be used once. If you think you can get that authenticator app back soon, you can just log into VRChat normally with a recovery code. But be careful, you only have ten recovery codes if not disable Two-factor authentication until you can enable it again with a new device or app.  
If successful, it is recommended to delete or cross out the recovery code you have used, since it can only be used once. Then try to re-link your authenticator with one of your devices. You may need to submit a [https://help.vrchat.com/hc/en-us/requests/new?ticket_form_id=1900000725685 support ticket] to VRChat if you are unable to find your recovery code, or re-link your authenticator with your VRChat account.
==How to disable two-factor authentication==
if you need to disable two-factor authentication here are the steps to take:
#Go to the VRChat website, and log in to your account. You may need to use a backup code if you do not have access to your authenticator app.
#Once you've logged in, click on the Settings panel at the top left.
#Scroll down to the "Two-Factor Authentication" section, and click "Disable".
#You will be prompted to enter a six digit authentication code, enter a code from your authenticator app, or click "Use a recovery code instead".
Two-factor authentication should now be disabled from your account. If not, contact VRChat at [http://help.vrchat.com help.vrchat.com], and submit a locked account recovery request.


if this didn't go to [http://help.vrchat.com help.vrchat.com] and submit a locked account recovery request.
==Official resources==
==How to disable Two-factor Authentication.==
*[https://docs.vrchat.com/docs/setup-2fa Two-Factor Authentication] on ''docs.vrchat.com''
if you need to disable Two-factor authentication here are the steps to take:
*[http://help.vrchat.com VRChat Help Page] on ''help.vrchat.com''
#Go to the VRChat website and log in to your account, you may need to use a backup code.
 
#Once you've logged in, click on the "Edit Profile" button at the top left.
== See also ==
#Scroll down to the "Two-Factor Authentication" section, and click "Disable".
 
#you will be prompted to enter a six digit authentication code, enter a code from your authenticator app or click use a recovery code instead and use a recovery code.
* [[VRChat account]]
Two-factor Authentication should now be disabled, if not please contact VRChat at [http://help.vrchat.com help.vrchat.com] and submit a locked account recovery request
* [[Account linking|Account Linking]]
==Important links.==
* [[Trust and Safety]]
[http://help.vrchat.com VRChat Help Page]
 
== References ==
<references />

Revision as of 23:15, 15 February 2025

V · EThis is an official VRChat information page!
It is reviewed and approved by the VRCWiki Team. Learn how to contribute to this page by reading the Contribution Guide.

What is Two-Factor Authentication?

Two-Factor Authentication (2FA) helps protect your account with an extra login step. After submitting your username and password, you may be prompted to enter in a code generated by your authenticator app or e-mail address. By default, VRChat will have authentication codes sent to the same e-mail address used to create your VRChat account.

Having a strong password is recommended, however, attackers may eventually be able to guess, or be able to find out your password. With two-factor authentication, as long as nobody else has your device, you can be sure that no one else can log into your account, even if they steal your password.

While two-factor authentication helps keep your account secure, you should always ensure you are using a unique, and strong password.

Setup

Here are some instructions to help you setup[1] Two-Factor Authentication (2FA)

  1. Go to the VRChat website and log in to your account.
  2. Click on the "Edit Profile" button at the top left next to the "Messages" button.
  3. Scroll down to the "Two-Factor Authentication" section, and click "Enable".
  4. Download any authenticator app. Authy is great it allows you to back up your accounts to their cloud using an encryption password, so your 2FA codes are safe. If you're worried about swapping devices or losing your phone, this is probably the best app to use.
  5. then click next
  6. Now you need to add your account to the authenticator app this is different on each app.

If you are using Authy, click the three dots in the top right corner, select "Add Account," then scan the QR code on the website or choose "Enter key manually", and input the code displayed.

  1. The authenticator app should now show VRChat and a six digit code
  2. The VRChat website will now ask for this code, copy the code from the authenticator app and enter it into the VRChat website
  3. now click "Verify"
  4. If everything was done correctly, you will see a message saying, "You are protecting your account with an additional login step." If this is not the case, check the code again; it changes every thirty seconds. Also, make sure you typed the code correctly. On this screen, you'll also see some information about recovery codes. If you ever lose or damage your device, or otherwise can't get the authenticator codes, the recovery codes can help you log in.
DOWNLOAD YOUR RECOVERY CODES AND KEEP THEM SAFE. IF YOU DO NOT, YOU MAY PERMANENTLY LOSE ACCESS TO YOUR ACCOUNT.

if you are on mobile, select "Enter code manually". From now on, whenever you are logging in or applying a major update to the app, VRChat may ask for an authenticator app code.

How to log into VRChat with your authenticator app

VRChat client

When you sign into your VRChat account, after entering your username and password, you may be prompted to enter a Two-Factor Authentication code. Here’s what to do:

  1. Open your authenticator app.
  2. Click on the field that says "Enter code here..."
  3. Use the keypad to enter the six digit code on your authenticator app, then press OK.
  4. Now press the verify button, if offered.

If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". Each recovery code can only be used once. If you do not have access to your authenticator app, or recovery codes, try to sign into the VRChat website and disable 'Two-Factor Authentication' in the Settings panel.

Website

When you sign into the VRChat website after entering your username and password, you may be prompted to enter a two-factor authentication code. Here’s what to do:

  1. Open the authenticator app.
  2. Click on the field that says "000 000".
  3. Enter a code from your authenticator app.
  4. Now press the verify button.

If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". Each recovery code can only be used once. You may need to submit a support ticket to VRChat if you are unable to find your recovery code.

SDK

When you sign into the VRChat SDK within a Unity project, you will be prompted to enter a two-factor authentication code. Here’s what to do:

  1. Open the authenticator app.
  2. Click on the field that labeled "Code:".
  3. Enter a code from your authenticator app.
  4. Now press the verify button.

If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". Each recovery code can only be used once. If you do not have access to your authenticator app, or recovery codes, try to sign into the VRChat website and disable 'Two-Factor Authentication' in the Settings panel.

Losing access to your authenticator app

If you lose the device with the authenticator app, or its data is deleted, you can still log into VRChat with a recovery code.

  1. First, find your recovery codes.
  2. Then, log in to the VRChat website with your username and password. When you get to the Two-Factor Authentication screen, click on "Use a recovery code instead".
  3. Enter one of your recovery codes into the field.
  4. You should now be logged into VRChat.

If successful, it is recommended to delete or cross out the recovery code you have used, since it can only be used once. Then try to re-link your authenticator with one of your devices. You may need to submit a support ticket to VRChat if you are unable to find your recovery code, or re-link your authenticator with your VRChat account.

How to disable two-factor authentication

if you need to disable two-factor authentication here are the steps to take:

  1. Go to the VRChat website, and log in to your account. You may need to use a backup code if you do not have access to your authenticator app.
  2. Once you've logged in, click on the Settings panel at the top left.
  3. Scroll down to the "Two-Factor Authentication" section, and click "Disable".
  4. You will be prompted to enter a six digit authentication code, enter a code from your authenticator app, or click "Use a recovery code instead".

Two-factor authentication should now be disabled from your account. If not, contact VRChat at help.vrchat.com, and submit a locked account recovery request.

Official resources

See also

References

  1. ↑ 'Two-Factor Authentication' on docs.vrchat.com; retrieved on February 15, 2025.
Retrieved from "https://wiki.vrchat.com/index.php?title=Two-Factor_Authentication_(2FA)&oldid=23763"