A Namecheap account holds your domains, and whoever controls them controls where your website and email go: a stolen password is enough to change DNS records, point the domain somewhere else or move it out of your account. With TOTP on, Namecheap asks for the six-digit code from your authenticator after your password, every time you sign in.
Turn on TOTP two-factor authentication at Namecheap
Namecheap allows one 2FA method at a time: if you already use a security key (U2F), switching to the authenticator app replaces it, and Namecheap asks you to confirm the change. Unlike most sites, it shows your backup codes before the QR code.
- Sign in to your Namecheap account on your computer.
- Select “Profile” on the left, then “Security”.
- In the “Access” section, open “Two-Factor Authentication” and click “Enable” for the authentication app (TOTP).
- Enter your Namecheap password and click “Continue”.
- Namecheap shows your TOTP backup codes first. Print or copy them, then click “Next”.
- When Namecheap shows a QR code, leave that page open and add it to the extension as described below — or click “enter this text code” for the key — then type the six-digit code from the extension and click “Next”.
Add Namecheap to Authenticator
- Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
- Leave the Namecheap page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
- The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
- Go back to Namecheap and type the current code into the confirmation field. If it is about to expire, wait for the next one.
- Namecheap confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.
No QR code, or it will not scan? Look for the option to enter a key manually on Namecheap’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.
Get 2FA Authenticator for Chrome — freeKeep your Namecheap TOTP backup codes
The backup codes Namecheap shows during setup start working once setup is complete, and each works once. At sign-in, “Want to use a Backup Code?” lets you use one instead of the code from your authenticator. Namecheap suggests keeping them in a password manager — somewhere other than this computer. “Show Backup Codes” in the same settings shows which are left (used ones are greyed out), and “Regenerate Backup Codes” gives you a new set and cancels the old one.
The code is not accepted?
Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.
Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.
Questions
- Can I use Namecheap 2FA without a phone?
- Yes. Namecheap’s guide speaks of an app on your mobile device, but its TOTP method works with any TOTP app, and all it checks is the six-digit code. The Authenticator extension reads the QR code straight off the Namecheap page and generates the codes in Chrome.
- Which authenticator app works with Namecheap?
- Namecheap names Google Authenticator, Authy and LastPass Authenticator, and says any TOTP-based app works — including the Authenticator extension.
- Can I have Namecheap codes on my phone and my computer?
- Yes — Namecheap lets you connect as many devices as you like. During setup, scan the same QR code with each one before you click “Next”; they all show the same code. Adding a device later means regenerating the QR code, which also replaces your backup codes and signs you out everywhere.
- What if I lose access to my authenticator?
- Click “Want to use a Backup Code?” at sign-in and use one of your backup codes. Then regenerate the QR code under Profile → Security → Access → Two-Factor Authentication: the old one stops working, and you add the new one to the extension. Namecheap may lock the account after several wrong codes, so switch to a backup code rather than guessing.
Your codes, one click from the login page
Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.
Get 2FA Authenticator for Chrome — free