We're on Product Hunt today! Leave a comment

Add to Chrome

Mailchimp authenticator app

Mailchimp 2-factor authentication works with authenticator apps like Google Authenticator — and one in your browser makes the same codes. Open your Account security page, choose “Authenticator app”, scan the QR code from the screen with the Authenticator extension, and click “Enable”.

A Mailchimp login opens your audience lists and lets anyone send email to all of them under your name — a favorite target for phishers who want a trusted sender. With 2-factor authentication on, a password alone no longer gets in: Mailchimp also asks for the six-digit code from your authenticator, and an app keeps working when you travel, where text messages may not arrive.

Turn on 2-factor authentication in Mailchimp

Once 2-factor authentication is on, Mailchimp does not let you remove it — only switch methods. When an Owner or Admin turns it on for their login, everyone else on the account has to set it up at their next sign-in. If you sign in to Mailchimp through Google or with your Intuit login (accounts set up through QuickBooks), the second step belongs to that sign-in, not to this setting.

  1. Sign in at mailchimp.com on your computer with your Mailchimp username and password.
  2. Click your profile icon and choose “Profile”.
  3. Open the “Settings” drop-down and choose “Security” — the Account security page.
  4. In the “2-factor authentication” section, select “Authenticator app” and click “Next”.
  5. Under “Set up authenticator app”, Mailchimp shows a QR code. Leave it on the screen and add it to the extension as described below — then type the code into “Authenticator code” and click “Enable”.
Mailchimp’s own instructions

Add Mailchimp to Authenticator

  1. Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
  2. Leave the Mailchimp page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
  3. The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
  4. Go back to Mailchimp and type the current code into the confirmation field. If it is about to expire, wait for the next one.
  5. Mailchimp confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Mailchimp’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Save your Mailchimp backup code

The confirmation page shows a backup code — save it offline or on another device, away from this computer, then click “Close”. It is the way in if you lose your authenticator; after you use it, Mailchimp gives you a new one to save. If it is lost, Mailchimp’s help says you can generate a new one in your settings while you can still sign in.

The code is not accepted?

Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.

If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Mailchimp’s help says the code needs a mobile device. Will a browser extension work?
Yes. Mailchimp’s help assumes a phone app such as Google Authenticator, but that app makes standard time-based codes from the QR code, and the extension makes the same codes from the same QR code. If you want a phone as well, scan the QR code with it during setup — both will show the same codes.
Can I turn off 2-factor authentication in Mailchimp?
No — once it is on, Mailchimp keeps it on. On the Account security page you can click “Reconfigure” to move it to another authenticator, or “Switch to SMS” to get codes by text message instead.
What if I lose access to my authenticator?
Sign in with your backup code, then reconfigure the authenticator. Without the backup code, Mailchimp’s only way back is for an Admin to invite you again as a new user under a new username — the old one stays locked. Keeping the extension’s automatic backups on spares you that.
Why does Mailchimp say my code is wrong?
Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. Also check that you copied the Mailchimp code, not another account’s — and if it still fails, click “Reconfigure” and add the new QR code.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.

Get 2FA Authenticator for Chrome — free