How to set up an authenticator in Chrome, step by step

This guide gets you from nothing to signing in with two-factor codes in Chrome in about five minutes. You don't need your phone. We'll use Twofold, a free authenticator extension, but the website side of the steps is the same everywhere.

1. Install Twofold

1. Open the Twofold page on the Chrome Web Store and click Add to Chrome, then Add extension.
2. Pin it so it's always one click away: click the puzzle-piece icon to the right of the address bar and click the pin next to Twofold.
3. A welcome page opens and walks you through the basics.

2. Create a master password (recommended)

Your codes are encrypted on your computer either way, but a master password means only you can unlock them. It's also required if you want to sync between computers or back up to Google Drive.

Choose something long and memorable. A few random words strung together ("lantern oyster meadow ninety") is both strong and easy to remember. Write it down and keep it somewhere safe: nobody can reset it for you, not even us. That's what keeps your vault private.

3. Turn on two-step verification on a website

Pick an account you care about, such as your email. Then:

1. Sign in to the website and open its security or account settings.
2. Look for two-step verification, two-factor authentication or 2FA.
3. When it asks how you want to receive codes, choose authenticator app. (Avoid text messages if you have the choice; here's why.)
4. The site shows a QR code. Leave it on the screen.

4. Add the account to Twofold

With the QR code visible, click the Twofold icon and press Scan. Twofold reads the code straight from the page and adds the account. You can also right-click anywhere on the page and choose Scan QR code on this page.

No QR code? Most sites also offer a text key ("Can't scan it?"). In Twofold choose Add account → Enter setup key, type the service name, your account name and the key. A live preview shows the code before you save.

5. Confirm the setup

The website asks you to type a code to prove everything works. Click the account in Twofold to copy its current code, paste it into the website, and confirm. Done: the account is protected.

Now save the backup codes the website offers. Print them or store them somewhere safe, away from your computer. They get you in if you ever lose access to your codes.

6. Sign in the easy way

Next time the site asks for a code, you have three options:

• One click: open Twofold. The account for the site you're on is already at the top. Press Fill, or click it to copy.
• Keyboard: press Alt+Shift+F on the sign-in page to fill the code.
• Automatic: turn on smart autofill in Settings and Twofold offers the code right next to the field, or fills it in by itself if you prefer.

Smart autofill only suggests an account on the website it belongs to, so a lookalike phishing page can't trick you. We explain how in how Twofold stops phishing sites.

7. Make a backup

Finally, make sure losing your computer can't lock you out. In Twofold, open Settings → Sync & backup and turn on Chrome Sync or Google Drive, or export an encrypted backup file. Our backup guide covers the options.

Moving from another authenticator?

Most authenticator apps can export your accounts as a file or as QR codes. In Twofold, open Import, then drop the file in or scan the export QR codes. Twofold shows everything it found, lets you untick what you don't want, and never adds an account twice.