Authenticator app 2FA for security, identity and VPN services
Password managers, identity providers, VPNs and security tools guard other accounts, so losing one can expose many more. These guides show how each service adds an authenticator app and how carefully it handles recovery.
Security, identity and VPN · 57
1PasswordTurn on two-factor authentication for your 1Password account with a separate authenticator app: where it is, the 16-character backup secret, and recovery.
AdGuardAdGuard gives no backup codes: the setup key is your way back in. Turn on authenticator-app 2FA for your AdGuard account and keep that key safe.
ANY.RUNANY.RUN 2FA uses an authenticator app, set up under Profile > Security. Team owners can make it mandatory. Setup, team rules, and what to do if locked out.
Auth0Auth0 requires MFA for most Dashboard sign-ins. Add an authenticator app in Your Profile, keep a backup method, and see why lost access may be permanent.
AvastAvast gives you one recovery code, and using it turns 2-step verification off. Set up an authenticator app on the current or new Avast Account portal.
AVGAVG Account 2-step verification uses an authenticator app and a single R- recovery code. Where to turn it on, which QR code to scan, and how to recover.
BitdefenderBitdefender has you pick email or an authenticator app for 2FA. Where the setting is, the extra codes to keep, and why only Support can reset it.
BitwardenProtect your Bitwarden vault with an authenticator app: where two-step login is, why its code belongs outside the vault, and the one recovery code.
BugcrowdBugcrowd requires 2FA for every researcher. Add an authenticator app on its new Okta-based sign-in or in Crowdcontrol, and what to do if you lose it.
Check Point SASEIn Check Point SASE, formerly Perimeter 81, your admin turns on 2FA, not you. How the authenticator app step works, who resets it, and what to ask for.
CloudflareCloudflare needs a verified email before 2FA, and recovery without backup codes takes 3-5 days. How to set up an authenticator app and stay out of trouble.- CobaltCobalt makes email-and-password users set up an authenticator app and gives one recovery code. Where the setting is, the 30-day option, and who resets it.
DashlaneDashlane 2FA can only be turned on in a computer browser. Set it up with an authenticator app, choose when it asks, and keep its recovery codes safe.
DelineaIn Delinea, an administrator turns on authenticator sign-in and you enroll at your next login. Platform and Secret Server steps, plus lost-phone resets.
DetectifyDetectify 2FA uses any TOTP authenticator app and gives you recovery codes. Where the setting is, what SSO changes, and who to email if you're locked out.- DigiCertDigiCert CertCentral requires 2FA for every account, and the authenticator setup happens at sign-in. The steps, the self-service reset, and lockouts.
dmarcianAdd an authenticator app to your dmarcian login, save the ten backup codes, and see what an admin needs before requiring 2FA for every user.
DNSFilterDNSFilter has required MFA on new dashboard accounts since July 2025. Set it up with an authenticator app, enforce it for your team, and reset it.
EasyDMARCEasyDMARC's only documented 2FA method is an authenticator app, and no backup codes are mentioned. Where to turn it on, switch phones, and recover.
ESET HOMEProtect your ESET HOME account with an authenticator app: the password step for Google and Apple sign-ins, ten recovery codes, and lockout help.
F-SecureMy F-Secure 2-step verification has no text or email fallback, so recovery codes are your only backup. How to set it up, and what to do if locked out.
HackerOneHackerOne requires 2FA unless you sign in with SSO. Set it up with an authenticator app, keep the backup codes that are your recovery, and fix bad codes.- HeimdalHeimdal asks for an authenticator app the first time you sign in to the Heimdal Dashboard. The setup screen, the reset link, and who can switch 2FA off.
hide.me VPNhide.me VPN keeps its 2FA setting in the web Member Area. Set up an authenticator app, save the recovery codes it shows once, and see what Support asks.
IntigritiSome Intigriti bug bounty programs only open to researchers with 2FA. How to turn it on with an authenticator app, save backup codes, and get back in.
IronVestAdd an authenticator app to your IronVest account from the web app's settings, what IronVest gives you instead of backup codes, and how to reset 2FA.
IVPNIVPN 2FA guards your Account ID on the website and in the VPN apps. Where the checkbox is, the backup codes, and the catch for older ivpn-style accounts.
JumpCloudJumpCloud gives no backup codes: the key under its QR code is your backup. Where to set up the authenticator, why to scan, and who resets it for you.
KasperskyMy Kaspersky only offers an authenticator app after you turn on text-message codes. The setup steps, what changes, and what to do if you lose your phone.
KeeperProtect your Keeper vault with an authenticator app: the setting on web and iPhone, backup codes, how often Keeper asks, and what to do if locked out.
KnowBe4KnowBe4 MFA works only with an authenticator app, and its help lists no backup codes. Where to turn it on as an admin or learner, and who can unlock you.
LastPassUse LastPass's Google Authenticator option with another authenticator app: where it is, the offline access choice, and the email reset if you lose it.
NordPassNordPass 2FA is set on your Nord Account, so one code also guards NordVPN and NordLocker. Setup, backup codes, where not to keep the code, and recovery.
NortonNorton's entry in your authenticator gets a coded SOTP- name. Set up the app, add a backup method, keep your codes and avoid a 24-hour lockout.
OktaYour Okta admin decides if you can use an authenticator app. Where the Google Authenticator option is, why Okta Verify push differs, and who resets it.- OneLoginOneLogin offers the Authenticator factor only if your admin assigned it. Where to add it in Security Factors, changing phones, and who can let you in.
ORCIDORCID shows your 2FA recovery codes once and keeps no copy. Turn on an authenticator app in Account Settings, save the codes, and recover if locked out.- Panda SecurityTurn on two-factor authentication for the Panda Account behind My Panda and Panda Cloud. Panda documents no backup codes, so plan for a lost phone first.
PasspackPasspack names Google and Microsoft Authenticator, but any app can scan its QR code. Where the setting is, the ten emergency codes, and lockout help.
PasswardenPasswarden 2FA lives on your KeepSolid ID, not in the app: turn it on in the KeepSolid User Office, link an authenticator app and save your backup codes.
PreyPrey gives you a single recovery code, and using it switches two-step verification off. Set up an authenticator app, keep that code, and add SMS recovery.
Private Internet AccessPIA's 2FA lives in the Client Control Panel and works only with an authenticator app. Steps, one-time recovery codes, the dark-theme QR tip, and recovery.
RoboFormRoboForm asks for an authenticator code on new devices, with an email code as fallback. Where the setting is, what to keep out of RoboForm, and recovery.- SecurityTrailsSecurityTrails gives no backup codes: it asks you to save your setup key instead. Where to turn on 2FA, how to add an app, and what to do if locked out.
- Sophos FusionSophos Central is becoming Sophos Fusion, and admins now need two sign-in methods. Add an authenticator app, and recover without backup codes.
- Sophos HomeSophos Home MFA has no backup codes: you add a recovery email or phone, and Direct Access on a protected PC can get you back in. Setup and recovery steps.
SSLTrustSSLTrust gives you a single Emergency Code when you turn on 2FA. Where the setting is in the SSLTrust Manager, what to scan, and how to recover.
SurfsharkSurfshark 2FA with an authenticator app: where the setting is, why Alert needs it, and why its 10 recovery codes are the only way back into your account.- ThreatConnectTurn on ThreatConnect MFA from the Authenticator tab of My Profile, what changes when your admin enforces it, and why only an admin can reset a lost app.
ThreatDown Nebula2FA has been mandatory in ThreatDown Nebula, formerly Malwarebytes Nebula, since May 2026. Set up an authenticator app and plan for a lost phone.
ThreatDown OneViewOneView, formerly Malwarebytes OneView, requires 2FA for every user since May 2026. Set up the app, plus the email recovery code and admin reset options.
TrendLife (Trend Micro)Trend Micro's account is now the TrendLife account. Add an authenticator app plus a second method, as there are no backup codes, and see how resets work.
TunnelBearTurn on TunnelBear 2FA with an authenticator app from the VPN app or the website. Backup codes come only with the app method, so here's how to keep them.
VirusTotalVirusTotal keeps 2FA under Settings in your user menu, and group admins can make it mandatory. Setup, backup codes, and who resets it if you're locked out.
WebrootWebroot 2FA replaces the security code you type at every sign-in. Where to turn it on, the three security questions to remember, and how the reset works.
WindscribeWindscribe 2FA works only with an authenticator app, and its recovery key is also the setup key. Where to turn it on, what to save, and what to expect.- Wordfence CentralYour wordfence.com account has its own 2FA, separate from the plugin's. Where to turn it on, the code-after-password sign-in, and what backup codes do.
Before you start
Other types of service
- Banks and credit unions14
- Investing and brokerage25
- Crypto exchanges and wallets78
- Payments, accounting and insurance76
- Developer tools107
- Hosting and cloud103
- Domain registrars53
- Email30
- Messaging and social39
- Cloud storage and backup26
- Gaming and betting51
- Entertainment and creative tools26
- Marketing and sales74
- Productivity and remote work61
- Business tools and other services74
- Shopping and tickets23
- Phone, internet and utilities10
- Travel and transport13
- Universities and education32
- Government17
- Health15
- Smart home and devices19