Two-Factor Authentication (2FA)
What is Two-Factor Authentication?
Two-Factor Authentication (2FA) helps protect your account with an extra login step. After your username and password, you'll enter in a code generated by an app. Having a strong password is good, but sometimes it's not enough. Attackers can still guess, steal or trick you into revealing your password. With 2FA, as long as nobody else has your device, you can be sure that no one else can log in, even if they steal your password.
While Two-Factor Authentication helps keep your account secure, you should always ensure you are using a strong password that you don't use elsewhere.
Setup.
Here are some instructions to help you setup Two-Factor Authentication (2FA)
- Go to the VRChat website and log in to your account.
- Click on the "Edit Profile" button at the top left next to the "Messages" button.
- Scroll down to the "Two-Factor Authentication" section, and click "Enable".
- Download any authenticator app. Authy is great it allows you to back up your accounts to their cloud using an encryption password, so your 2FA codes are safe. If you're worried about swapping devices or losing your phone, this is probably the best app to use.
- then click next
- Now you need to add your account to the authenticator app this is different on each app.
If you are using Authy, click the three dots in the top right corner, select "Add Account," then scan the QR code on the website or choose "Enter key Manually" and input the code displayed.
- The authenticator app should now show VRChat and a six digit code
- The VRChat website will now ask for this code, copy the code from the authenticator app and enter it into the VRChat website
- now click "Verify"
- If everything was done correctly, you will see a message saying, "You are protecting your account with an additional login step." If this is not the case, check the code again; it changes every thirty seconds. Also, make sure you typed the code correctly. On this screen, you'll also see some information about recovery codes. If you ever lose or damage your device, or otherwise can't get the authenticator codes, the recovery codes can help you log in.
if you are on mobile select enter code manually. From now on, whenever you are logging in, we may ask you for authenticator app code — especially if it looks like you are logging in from a new location or device.
How to log into VRChat with your Authenticator App.
VRChat Client
When you sign into your VRChat account after entering your Username and Password You may be prompted to enter a Two-Factor Authentication code. Here’s what to do:
- Open the authenticator app.
- Click on the field that says "Enter code here...".
- Use the keypad to enter the six digit code on your authenticator app, then press OK.
- Now press the verify button.
If this doesn't work check you have entered the code correctly and that it has not changed before you clicked ok, in case of emergency click "Use recovery code" but be careful each code can only be used once If you think you might have lost your authenticator app or its data permanently, sign into the VRChat website and disable Two-Factor Authentication.
Website
when you sign into the VRChat website after entering your Username and Password You may be prompted to enter a Two-Factor authentication code. Here’s what to do:
- Open the authenticator app.
- Click on the field that says "000 000".
- Enter a code from your authenticator app.
- Now press the verify button.
If this doesn't work check you have entered the code correctly and that it has not changed before you clicked ok in case of emergency click "Use recovery code" but be careful each code can only be used once If you think you might have lost your authenticator app or its data permanently, disable Two-factor authentication until you can enable it again with a new device or app.
SDK
when you sign into the VRChat SDK in a new project after entering your Username and Password You will be prompted to enter a Two-Factor authentication code. Here’s what to do:
- Open the authenticator app.
- Click on the field that labeled "Code:".
- Enter a code from your authenticator app.
- Now press the verify button.
If this doesn't work check you have entered the code correctly and that it has not changed before you clicked ok, in case of emergency click "Use recovery code" but be careful each code can only be used once If you think you might have lost your authenticator app or its data permanently, sign into the VRChat website and disable Two-factor authentication.
What if you lose access to your authenticator app.
If you lose the device with the authenticator app, or its data is deleted, you can still log into VRChat with a recovery code.
- First, find your recovery codes.
- Then, login to the VRChat website with your username and password. When you get to the Two-Factor Authentication screen, click on "Use a recovery code instead".
- Enter one of your recovery codes into the field.
- You should now be logged into VRChat.
if successful its recommended to delete or cross out the recovery code you have used since it can only be used once. If you think you can get that authenticator app back soon, you can just log into VRChat normally with a recovery code. But be careful, you only have ten recovery codes if not disable Two-factor authentication until you can enable it again with a new device or app.
if this didn't go to help.vrchat.com and submit a locked account recovery request.
How to disable Two-factor Authentication.
if you need to disable Two-factor authentication here are the steps to take:
- Go to the VRChat website and log in to your account, you may need to use a backup code.
- Once you've logged in, click on the "Edit Profile" button at the top left.
- Scroll down to the "Two-Factor Authentication" section, and click "Disable".
- you will be prompted to enter a six digit authentication code, enter a code from your authenticator app or click use a recovery code instead and use a recovery code.
Two-factor Authentication should now be disabled, if not please contact VRChat at help.vrchat.com and submit a locked account recovery request
