Do I need the GoDaddy app or a phone for 2-Step Verification?

No. GoDaddy recommends its own app, but also accepts any third-party authenticator such as Google Authenticator or Authy. The Authenticator extension generates the same six-digit codes in Chrome and reads the barcode straight off the GoDaddy page.

I added the authenticator, but GoDaddy does not ask for a code when I sign in.

A verification method alone is used only for high-risk actions and sign-ins GoDaddy finds suspicious. To be asked every time, open your Security page and switch on the “2-Step Verification” toggle under “Enhanced Security”.

What if I lose access to my authenticator?

Verify with your other method — the GoDaddy app, another authenticator or your phone number — then remove the lost one and add the authenticator again. That is why GoDaddy asks for a backup method on a second device, and why keeping the extension’s automatic backups on matters.

Why does GoDaddy say my code is wrong?

Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. If it still fails, the account may have been added from an old barcode — remove it from the extension and add the authenticator method again.

GoDaddy Authenticator App — Turn On 2-Step Verification

A GoDaddy account controls your domains, and whoever controls the domain controls the website, the email on it and every password reset sent there. A stolen password is enough to point it elsewhere or transfer it away. GoDaddy itself suggests keeping one verification method on your phone and an authenticator app on your laptop as the backup — exactly what the extension is for.

Turn on 2-Step Verification at GoDaddy

GoDaddy does this in two parts. Adding the authenticator app as a verification method makes GoDaddy ask for a code during high-risk actions and suspicious sign-ins; the “2-Step Verification” toggle, which can only be switched on once a method is added, makes it ask at every sign-in. GoDaddy recommends its own GoDaddy app, but lists the authenticator app as an equal choice.

Sign in to GoDaddy on your computer and go to your “Security” page.
In the “Security” list, below “Verification Methods”, select “Add verification method”.
Choose “Authenticator app” and select “Next”.
Skip GoDaddy’s instruction to install an app on your phone — the extension is the app.
GoDaddy shows a barcode (QR code). Leave it on the screen and add it to the extension as described below — GoDaddy also asks for the app’s name. Once the method is listed, switch on the “2-Step Verification” toggle under “Enhanced Security” on the same page.

GoDaddy’s own instructions

Add GoDaddy to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the GoDaddy page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to GoDaddy and type the current code into the confirmation field. If it is about to expire, wait for the next one.
GoDaddy confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on GoDaddy’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Plan a way back into GoDaddy

GoDaddy’s help pages do not describe backup codes. Instead, GoDaddy recommends at least one more verification method, ideally on another device — the GoDaddy app or an authenticator app on your phone, or your phone number — so losing one method does not lock you out. Keep the extension’s automatic backups on as well. If every method fails, GoDaddy support will ask you to verify with one of them before helping.

The code is not accepted?

Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.

If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Do I need the GoDaddy app or a phone for 2-Step Verification?: No. GoDaddy recommends its own app, but also accepts any third-party authenticator such as Google Authenticator or Authy. The Authenticator extension generates the same six-digit codes in Chrome and reads the barcode straight off the GoDaddy page.
I added the authenticator, but GoDaddy does not ask for a code when I sign in.: A verification method alone is used only for high-risk actions and sign-ins GoDaddy finds suspicious. To be asked every time, open your Security page and switch on the “2-Step Verification” toggle under “Enhanced Security”.
What if I lose access to my authenticator?: Verify with your other method — the GoDaddy app, another authenticator or your phone number — then remove the lost one and add the authenticator again. That is why GoDaddy asks for a backup method on a second device, and why keeping the extension’s automatic backups on matters.
Why does GoDaddy say my code is wrong?: Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. If it still fails, the account may have been added from an old barcode — remove it from the extension and add the authenticator method again.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.