Discord Two-Factor Authentication: Add a Second Lock in Minutes
Your Discord account holds your friends, your servers, your chat history and sometimes payment details. If someone gets your password, through a fake login page, a reused password or malware, they could walk straight in. Two-factor authentication (2FA) adds a second check, so a password alone isn't enough.
What 2FA does on Discord
With 2FA on, logging in needs two things: something you know (your password) and something you have (usually your phone with an authenticator app). Even if a scammer has your password, they get stuck at the code screen. That one extra step blocks a lot of account takeovers.
How to turn it on
Menu names can shift slightly between updates and between desktop and phone, but the steps look like this:
- Open User Settings (the cog by your name) and go to My Account.
- Choose the option to enable authenticator app or two-factor authentication. You'll be asked for your password.
- Install an authenticator app on your phone if you don't have one. Many free ones work, and Discord's own instructions list examples.
- Scan the QR code Discord shows you, or type in the setup key manually.
- Enter the six-digit code from the authenticator app to confirm it works.
- Download and save your backup codes (see below).
The codes in your authenticator app refresh every 30 seconds or so, so a code that someone saw earlier quickly becomes useless.
Don't skip the backup codes
Lose your phone without backup codes and you could lock yourself out of your own account. Discord gives you a set of one-time backup codes when you enable 2FA. Each one works once.
- Store them somewhere safe, such as a password manager or a printed copy in a drawer at home.
- Don't keep them in a Discord DM, a public note or a screenshot on a shared device.
- If you use most of them up, generate a fresh set in your account settings.
Other ways to add protection
Discord also lets you add extra options in the same settings area, such as a security key or a text-message backup, depending on what is available for your account and region. A physical security key is harder to trick than a typed code. If you're unsure, an authenticator app plus saved backup codes is a solid, simple setup.
Pair 2FA with a unique password that you don't use anywhere else. If your password is the same as your gaming or email login, one leak elsewhere could still put you at risk.
Scams that target your codes
Because 2FA works, scammers try to talk you into giving up the code. Watch for these tricks:
- A "friend" whose account was hacked asks you to read out a code "to verify" something.
- A message claims you've won Nitro, a giveaway or a trade, then sends you to a login page that also asks for your code.
- Someone pretending to be Discord support says your account will be deleted unless you share a code.
The rule is simple: never give your 2FA or backup codes to anyone, no matter how friendly or official they seem. A code is only for the login screen on Discord's real app or website. If a page you reached through a link asks for it, close it and go to Discord directly.
If you change phones
Before you wipe or replace a phone, check how your authenticator app transfers accounts. Some apps can move your codes to a new device, others need you to set up 2FA again. Keep your backup codes handy during the switch, and only remove 2FA from the old phone once the new one works.
Quick checklist
- 2FA is switched on for your Discord account.
- Your password is long and used only for Discord.
- Backup codes are saved somewhere safe and private.
- You know that nobody legitimate will ever ask for your codes.
Where to learn more
Discord explains account security and its latest options in its Safety Center and Help Center. Check those official pages for current steps, since menus can change. If you think your account is already compromised, change your password, review your logged-in devices and tell a trusted adult.
Setting up 2FA takes only a few minutes, and it's one of the most effective things you can do to keep your Discord yours.