Two-Factor Authentication (2FA)

V · EThis is an official VRChat information page!

It is reviewed and approved by the VRCWiki Team. Learn how to contribute to this page by reading the Contribution Guide.

What is Two-Factor Authentication?

Two-Factor Authentication (2FA) helps protect your account with an extra login step. After submitting your username and password, you may be prompted to enter in a code generated by your authenticator app or e-mail address. By default, VRChat will have authentication codes sent to the same e-mail address used to create your VRChat account.

Having a strong password is recommended, however, attackers may eventually be able to guess, or be able to find out your password. With two-factor authentication, as long as nobody else has your device, you can be sure that no one else can log into your account, even if they steal your password.

While two-factor authentication helps keep your account secure, you should always ensure you are using a unique, and strong password.

Setup

Here are some instructions to help you setup Two-Factor Authentication (2FA)

1. Go to the VRChat website and log in to your account.
2. Click on the "Edit Profile" button at the top left next to the "Messages" button.
3. Scroll down to the "Two-Factor Authentication" section, and click "Enable".
4. Download any authenticator app. Authy is great it allows you to back up your accounts to their cloud using an encryption password, so your 2FA codes are safe. If you're worried about swapping devices or losing your phone, this is probably the best app to use.
5. then click next
6. Now you need to add your account to the authenticator app this is different on each app.

If you are using Authy, click the three dots in the top right corner, select "Add Account," then scan the QR code on the website or choose "Enter key manually", and input the code displayed.

1. The authenticator app should now show VRChat and a six digit code
2. The VRChat website will now ask for this code, copy the code from the authenticator app and enter it into the VRChat website
3. now click "Verify"
4. If everything was done correctly, you will see a message saying, "You are protecting your account with an additional login step." If this is not the case, check the code again; it changes every thirty seconds. Also, make sure you typed the code correctly. On this screen, you'll also see some information about recovery codes. If you ever lose or damage your device, or otherwise can't get the authenticator codes, the recovery codes can help you log in.

DOWNLOAD YOUR RECOVERY CODES AND KEEP THEM SAFE. IF YOU DO NOT, YOU MAY PERMANENTLY LOSE ACCESS TO YOUR ACCOUNT.

if you are on mobile, select "Enter code manually". From now on, whenever you are logging in or applying a major update to the app, VRChat may ask for an authenticator app code.

How to log into VRChat with your authenticator app

VRChat client

When you sign into your VRChat account, after entering your username and password, you may be prompted to enter a Two-Factor Authentication code. Here’s what to do:

1. Open your authenticator app.
2. Click on the field that says "Enter code here..."
3. Use the keypad to enter the six digit code on your authenticator app, then press OK.
4. Now press the verify button, if offered.

If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". Each recovery code can only be used once. If you do not have access to your authenticator app, or recovery codes, try to sign into the VRChat website and disable 'Two-Factor Authentication' in the Settings panel.

Website

When you sign into the VRChat website after entering your username and password, you may be prompted to enter a two-factor authentication code. Here’s what to do:

1. Open the authenticator app.
2. Click on the field that says "000 000".
3. Enter a code from your authenticator app.
4. Now press the verify button.

If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". Each recovery code can only be used once. You may need to submit a support ticket to VRChat if you are unable to find your recovery code.

SDK

When you sign into the VRChat SDK within a Unity project, you will be prompted to enter a two-factor authentication code. Here’s what to do:

1. Open the authenticator app.
2. Click on the field that labeled "Code:".
3. Enter a code from your authenticator app.
4. Now press the verify button.

If this doesn't work, check that you have properly entered the code, and that it has not changed before you clicking OK. In you are still unable to sign in with your authenticator, click "Use recovery code". Each recovery code can only be used once. If you do not have access to your authenticator app, or recovery codes, try to sign into the VRChat website and disable 'Two-Factor Authentication' in the Settings panel.

Losing access to your authenticator app

If you lose the device with the authenticator app, or its data is deleted, you can still log into VRChat with a recovery code.

1. First, find your recovery codes.
2. Then, log in to the VRChat website with your username and password. When you get to the Two-Factor Authentication screen, click on "Use a recovery code instead".
3. Enter one of your recovery codes into the field.
4. You should now be logged into VRChat.

If successful, it is recommended to delete or cross out the recovery code you have used, since it can only be used once. Then try to re-link your authenticator with one of your devices. You may need to submit a support ticket to VRChat if you are unable to find your recovery code, or re-link your authenticator with your VRChat account.

How to disable two-factor authentication

if you need to disable two-factor authentication here are the steps to take:

1. Go to the VRChat website, and log in to your account. You may need to use a backup code if you do not have access to your authenticator app.
2. Once you've logged in, click on the Settings panel at the top left.
3. Scroll down to the "Two-Factor Authentication" section, and click "Disable".
4. You will be prompted to enter a six digit authentication code, enter a code from your authenticator app, or click "Use a recovery code instead".

Two-factor authentication should now be disabled from your account. If not, contact VRChat at help.vrchat.com, and submit a locked account recovery request.

Official resources

• Two-Factor Authentication on docs.vrchat.com
• VRChat Help Page on help.vrchat.com

See also

• VRChat account
• Account Linking
• Trust and Safety