Go to User Settings (the cog by your name), click My Account and click Enable Authenticator App. Scan the QR code with an authenticator app on your phone, type in the 6-digit code it shows, and Discord switches 2FA on. Then save the backup codes it gives you straight away.
Discord calls this multi-factor authentication now, so you may see MFA instead of 2FA in the menus. It means the same thing: after your password, Discord asks for a code from your phone, so someone who steals your password still can't get in. If the idea's new to you, here's what two-factor authentication is in plain English.
The catch nobody tells you: Discord's support team can't remove 2FA from your account. If you lose your phone and didn't save your backup codes, Discord's help centre says there's no way back in, and you'd have to start a new account. The backup codes are the whole safety net.
Before you start
- Install an authenticator app on your phone. Google Authenticator, Microsoft Authenticator and Authy all work, as do password managers with a built-in authenticator.
- Check your email's verified. If Discord shows a banner asking you to verify your email, do that first so your account has a working recovery address. If the email never arrives, my guide on Discord not sending the verification email walks through the fixes.
- Know your password. Discord asks for it during setup.
Turn on 2FA on desktop or in a browser
- Click the cog icon next to your username at the bottom left to open User Settings.
- Click My Account.
- Scroll to the Password and Authentication section and click Enable Authenticator App.
- Enter your Discord password when asked.
- Open your authenticator app, add a new account and scan the QR code on screen. If you can't scan it, type in the key shown under the code instead.
- Type the 6-digit code from the app into Discord and click Activate.
- Discord now shows your backup codes. Download them or write them down before you close the window.
Turn it on from the Discord mobile app
- Tap your profile picture (the You tab) at the bottom right.
- Tap the cog to open settings, then tap Account.
- Tap the option to enable the authenticator app and enter your password.
- If your authenticator app is on the same phone, copy the key Discord shows and paste it into the app as a new account.
- Switch back to Discord, enter the 6-digit code and confirm.
- Save the backup codes somewhere off your phone.
Discord's menus change now and then. If a label looks different, search the app's settings for authenticator or security.
SMS backup, security keys and passkeys
The authenticator app is the main method, but Discord now supports a few more:
- SMS backup. You can add a phone number for text-message codes, but only after the authenticator app is set up. Discord's own help page says it's less secure, because phone numbers can be stolen through SIM-swap scams. It's a backup, not a replacement.
- Security keys and passkeys. You can register a physical security key or a passkey stored on your phone or computer. Discord lets you keep up to 16 at once, and you add them from the security keys option in My Account.
Your methods at a glance
| Method | How it works | What to keep safe |
|---|---|---|
| Authenticator app | An app on your phone shows a 6-digit code that keeps changing | Your phone, and the app's backup if it has one |
| Backup codes | One-time 8-digit codes for when you can't use your phone | The codes file or a printed copy, stored away from your phone |
| SMS backup | Discord texts a code to your number | Your phone number; ask your network to add a SIM PIN |
| Security key or passkey | You tap a key or confirm with your fingerprint or face | The key itself, or the device that stores the passkey |
Where to keep your backup codes
Discord's backup codes are 8 digits each, and each one works once. You type it in without spaces or dashes. If you downloaded them, the file is usually called discord_backup_codes.txt, so you can search your computer for that name later.
- Put them in your password manager, in the notes for your Discord login.
- Or print them and keep the paper with other important documents.
- Don't keep them only on the phone that runs your authenticator app. If you lose the phone, you lose both.
- If you think someone's seen them, generate a new set in My Account. The old ones stop working.
Not all authenticator apps back up to the cloud, which is another reason the codes matter. If yours offers a backup or sync option, switch it on.
What server mods need
Server owners can make 2FA compulsory for anyone with moderator powers. It's in Server Settings under Safety Setup, and the owner has to have 2FA on their own account before they can switch it on. Once it's on, a moderator without 2FA loses actions like deleting messages or banning people until they set it up. Regular members aren't affected. If you've just been made a mod and your tools look greyed out, this is almost always why.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Locked out? Your recovery route
- Check whether you're still logged in to Discord anywhere: another computer, a browser, a tablet. From there you can view your backup codes with your password.
- Search your computer for discord_backup_codes.txt.
- If you set up SMS backup, choose the text-message option on the login screen.
- Use a backup code on the login screen where it asks for your 2FA code.
If none of those work, Discord's help centre is honest about it: support can't switch 2FA off for you. That's the trade-off for the extra security, and it's why I'd sort the codes out before anything else. For other account problems, my Discord help guide explains where to get support.
What I'd do
I'd turn on the authenticator app today, save the backup codes in a password manager before closing the window, and only add SMS as a second backup. It takes a few minutes and it's the single biggest protection your account can have.
Frequently asked questions
Can Discord support turn off 2FA if I lose my phone?
No. Discord's help centre says its support team can't remove 2FA from an account. You need a backup code, SMS backup or a device where you're still logged in.
Can I use SMS instead of an authenticator app on Discord?
Not on its own. Discord only lets you add SMS as a backup after you've set up an authenticator app or another main method, and it says SMS is the less secure option.
How long are Discord backup codes?
Each backup code is 8 digits and works once. Type it without spaces or dashes on the screen that asks for your 2FA code.
Why do my moderator tools not work on a server?
The server probably requires 2FA for moderators. Turn on 2FA on your own account and the moderator actions come back.
