Coinbase requires 2-step verification on every account, but text messages are the default — and the method Coinbase itself calls the least secure, because codes follow your phone number wherever it goes. An authenticator app produces the codes on your own device, with no phone number involved. For the strongest protection Coinbase recommends a security key or a passkey; they can sit next to the authenticator app, and for a large balance they are worth adding.
Turn on the authenticator app at Coinbase
2-step verification is already on for every Coinbase account, usually with text message codes. Adding an authenticator app does not lock you out of the others: Coinbase lets you keep several methods, turn each on or off, and pick another one at sign-in with “Try another way”.
- Sign in at coinbase.com on your computer.
- Open the 2-step verification settings page at accounts.coinbase.com/security/settings.
- In “Available methods”, click “Set up” next to “Authenticator app”.
- Follow the prompts. When Coinbase shows the QR code, leave it on the screen and add it to the extension as described below.
- Enter the code from the extension to finish. You can turn methods on or off later on the same page.
Add Coinbase to Authenticator
- Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
- Leave the Coinbase page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
- The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
- Go back to Coinbase and type the current code into the confirmation field. If it is about to expire, wait for the next one.
- Coinbase confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.
No QR code, or it will not scan? Look for the option to enter a key manually on Coinbase’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.
Get 2FA Authenticator for Chrome — freeGive Coinbase a second way in
Coinbase’s safety net is a second method rather than a list of codes: it recommends setting up more than one, so that if one fails you can choose “Try another way” at sign-in. Add a passkey or a security key next to the authenticator, and consider trusted contacts — two to five people you know who can approve an account recovery request, usable 24 hours after setup. If the authenticator is your only method and you lose it, recovery goes through ID verification, which takes up to 24 hours and may stop you from sending funds for another 24.
The code is not accepted?
Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.
If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.
Questions
- Can I use a Coinbase authenticator on my computer instead of a phone?
- Yes. Coinbase supports all authenticator apps; its instructions mention a phone only because that is where most people keep one. The codes are standard time-based codes (TOTP), so the Authenticator extension generates the same ones in Chrome and can read the QR code straight off the Coinbase page.
- Is an authenticator app better than SMS on Coinbase?
- Yes. Coinbase calls text messages its least secure method: someone who moves your phone number to their own SIM card receives your codes. An authenticator app is tied to your device, not your number. A security key or passkey is stronger still, and Coinbase recommends one for the best protection.
- What if I lose my authenticator for Coinbase?
- At sign-in choose “Try another way” and use another method you set up. If the authenticator was your only one, start account recovery at login.coinbase.com/recovery: you upload your ID or ask your trusted contacts to approve, it takes up to 24 hours, and sending funds may be blocked for 24 hours after. Keeping the extension’s automatic backups on means a reinstall does not send you there.
- Why does Coinbase say my code is wrong?
- Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. If it still fails, the account may have been added from an old QR code — remove it from the extension and set the authenticator app up again.
Your codes, one click from the login page
Authenticator keeps your 2FA codes in the browser, on your device only — free, open source, no account and no phone needed. Local backups and optional password protection come built in.
Get 2FA Authenticator for Chrome — free