Can I use ChatGPT MFA without a phone?

Yes. OpenAI names phone apps like Google Authenticator and Authy, but all ChatGPT checks is the one-time code, and any standard authenticator produces it. The Authenticator extension reads the QR code straight off the ChatGPT settings page and generates the codes in Chrome.

What if I lose access to my authenticator?

At the sign-in prompt, choose another method you set up — a passkey, text messages or a second authenticator. With none left, contact OpenAI Support: after a verification that can take a few days, it gives you a one-time email sign-in, and you then have to add a new MFA method or turn MFA off. That rescue is offered only once.

Why does ChatGPT say my code is wrong?

Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. If it still fails, the account may have been added from an old QR code — remove it from the extension and set the authenticator up again.

I sign in to ChatGPT with Google. Does MFA still work?

MFA is set up for the way you signed in when you turned it on — Google, Microsoft, Apple, or email and password — and you must keep signing in that way until you turn it off. Which options appear can depend on how the account was created. Turning on 2-Step Verification for the Google account itself protects that sign-in as well.

ChatGPT Authenticator App — Turn On Multi-Factor Authentication

A ChatGPT account holds months of conversations, the files you uploaded and what ChatGPT remembers about you — and for developers the same OpenAI account runs the API Platform, with its keys and billing. A stolen password opens all of it. With MFA on, OpenAI also asks for the six-digit code from your authenticator, and the one setting covers ChatGPT and the API Platform at once.

Turn on multi-factor authentication in ChatGPT

MFA is tied to the way you signed in when you turned it on — email and password, or Google, Microsoft or Apple — and you must keep signing in that way while it is on. To switch, OpenAI says to turn MFA off first, sign in with the new method and turn it on again. Which MFA options you see can vary with your device, country, plan and how the account was created.

Sign in at chatgpt.com on your computer.
Click your profile in the lower left corner and choose “Settings” — or go straight to chatgpt.com/#settings/Security.
Select “Security and login”.
Under “Multi-factor authentication (MFA)”, choose the authenticator app and follow the instructions on the screen.
When ChatGPT shows a QR code, leave it on the screen and add it to the extension as described below — then enter the one-time code from the extension to finish.

ChatGPT’s own instructions

Add ChatGPT to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the ChatGPT page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to ChatGPT and type the current code into the confirmation field. If it is about to expire, wait for the next one.
ChatGPT confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on ChatGPT’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Plan a way back into ChatGPT

OpenAI’s help does not describe backup codes for MFA, and email is not a way past it: if you lose every method you set up, OpenAI Support has to verify you — which can take a few days — and then gives you a one-time email sign-in that works only once per account. So add a second method now, such as a passkey or text messages, in the same “Security and login” section, and while the QR code is on the screen, scan it with an authenticator app on your phone as well. Keep the extension’s automatic backups on.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Can I use ChatGPT MFA without a phone?: Yes. OpenAI names phone apps like Google Authenticator and Authy, but all ChatGPT checks is the one-time code, and any standard authenticator produces it. The Authenticator extension reads the QR code straight off the ChatGPT settings page and generates the codes in Chrome.
What if I lose access to my authenticator?: At the sign-in prompt, choose another method you set up — a passkey, text messages or a second authenticator. With none left, contact OpenAI Support: after a verification that can take a few days, it gives you a one-time email sign-in, and you then have to add a new MFA method or turn MFA off. That rescue is offered only once.
Why does ChatGPT say my code is wrong?: Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. If it still fails, the account may have been added from an old QR code — remove it from the extension and set the authenticator up again.
I sign in to ChatGPT with Google. Does MFA still work?: MFA is set up for the way you signed in when you turned it on — Google, Microsoft, Apple, or email and password — and you must keep signing in that way until you turn it off. Which options appear can depend on how the account was created. Turning on 2-Step Verification for the Google account itself protects that sign-in as well.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.