A year ago, we launched Two-Factor Authentication as an optional—but highly encouraged—layer of additional security that prevents bad actors from accessing your account, even if your password is stolen! While 2FA has undoubtedly helped to protect countless accounts, it has sometimes worked a little too well…
Therefore, we wanted to reiterate this important message:
As you are setting up your account 2FA, make sure to save your backup codes in multiple secure places.
In rare cases, some true owners have been locked out of their accounts after they lost access to the device that both their Authenticator app and backup codes were stored on. We recommend writing them down somewhere safe, then storing photos of them on multiple devices.
If you have 2FA activated on your account and do not have access to your backup codes, remove and reinstate your 2FA so that you can receive new ones.
Instructions on how to do so can be found below.
If you have lost access to your Authenticator, please reach out to Support immediately. While we cannot guarantee granting account access, we will do all we can to assist you.
How to Set Up 2FA
Getting started with 2FA only takes a few minutes.
First, enable 2FA from your account settings:
- Log in to the Support site
- Visit your user page
- Find the Two-Factor Authentication section
- Click Enable Two-Factor Authentication
- Check your email and click the confirmation link to continue
Next, connect your Authenticator app:
- After confirming your email, you will be taken to the setup page
- Download an Authenticator app like Google Authenticator
- Scan the QR code or enter the provided key manually
- Enter the code shown in your app to verify
- Before finishing, make sure to save your backup codes somewhere safe
- Losing these backup codes could lock you out of your account permanently. Make sure these are somewhere you can find them!
We cannot stress more how important it is to maintain access to your Authenticator app and backup codes. Otherwise, you may lose access to your account permanently.
When You Will Be Asked for a Code?
Once you have set up 2FA, you will be asked for a verification code:
- Every time you log in to the Support site
- When you log in from a new device or after resetting your password
- About once every 30 days when logging into the game from a trusted device
This small extra step helps protect your account from unauthorized access, even if someone else knows your password.
What to Know About Backup Codes
Backup codes are provided when you set up 2FA. They are there for you if you ever lose access to your Authenticator app. Keep these things in mind:
- Each backup code can only be used one time
- Store your codes somewhere safe where only you can access them
- Never share your backup codes with anyone
- Always keep at least one backup code available in case of emergencies
Turning Off 2FA
We strongly recommend keeping 2FA enabled at all times. However, if you need to do so to reinstate it and obtain new backup codes, or simply wish to disable it, you can do so by:
- Logging in to the Support site
- Visiting your user page
- Navigating to the Two-Factor Authentication section
- Clicking Disable Two-Factor Authentication
- Entering your current 2FA code
- Confirming the change by clicking the link sent to your email
This extra confirmation step is there to make sure only you can make changes to your account security.
Until next time…Waddle on!
– The Club Penguin Journey Team
