Hijacked Discord accounts are how most server raids and scam links spread: once someone has your token or password, they write to all your friends as you. With an authenticator app on, a stolen password is not enough to sign in, and Discord asks for a code before the most sensitive changes.
Turn on the authenticator app in Discord
- Open Discord in the desktop app or at discord.com in your browser.
- Click the cogwheel next to your username to open “User Settings”.
- Go to “My Account” and find the “Password and Authentication” section.
- Click “Enable Authenticator App” and confirm your password if Discord asks for it.
- Discord shows a QR code. Leave it on the screen and add it to the extension as described below — then type the code into “Login with your code” and click “Activate”.
Add Discord to Authenticator
- Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
- Leave the Discord page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
- The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
- Go back to Discord and type the current code into the confirmation field. If it is about to expire, wait for the next one.
- Discord confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.
No QR code, or it will not scan? Look for the option to enter a key manually on Discord’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.
Get 2FA Authenticator for Chrome — freeSave your Discord backup codes
Right after activation Discord offers backup codes — eight-digit, single-use codes it downloads as discord_backup_codes.txt. Keep that file somewhere other than this computer. You can see them again, and which ones are used, under User Settings → My Account → “View Backup Codes”. Discord can also add SMS as a backup, but only after the authenticator app is on.
The code is not accepted?
Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.
If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.
Questions
- Can I use Discord 2FA without a phone?
- Yes. Discord accepts codes from any standard authenticator app, and the Authenticator extension generates them in Chrome. It can read the QR code straight off the Discord settings page, in the browser or from a screenshot of the desktop app.
- I lost my authenticator. Can Discord support turn 2FA off?
- No — Discord states that its support team cannot remove 2FA or issue new backup codes. At the login prompt choose “Verify with something else” and use a backup code or an SMS code if you set one up. That is why saving the backup codes, and backing up the extension, matters.
- Why is my Discord code invalid?
- Check the computer clock first: codes are based on the current time and a clock that is off by more than about 30 seconds produces codes Discord refuses. If the clock is fine, remove the account from the extension, turn the authenticator off in Discord with a backup code, and set it up again.
- Does the Discord desktop app work with a browser authenticator?
- Yes. The desktop app only asks for the six-digit code — copy it from the extension’s icon in Chrome and paste it into the app.
Your codes, one click from the login page
Authenticator keeps your 2FA codes in the browser, on your device only — free, open source, no account and no phone needed. Local backups and optional password protection come built in.
Get 2FA Authenticator for Chrome — free