Your Norton account holds your subscription and the devices it protects, and with Norton’s password manager or identity services it holds a great deal more. A stolen password is enough to change all of that. With two-factor authentication on, Norton also asks for a six-digit code from your authenticator — and an app cannot be intercepted with your phone number the way a text message can.
Turn on two-factor authentication in your Norton account
Norton needs a verified email address first: if the section shows “Verify your email” instead of “Set Up”, click it and confirm from the email Norton sends. The authenticator becomes your primary method; Norton recommends adding a phone number or a security key as a backup method afterwards.
- Sign in to your Norton account at my.norton.com on your computer.
- Hover over your profile icon in the top right corner and click “Account Settings”.
- In the “Two-Factor Authentication” section, click “Set Up”.
- Select “Mobile authenticator app” and click “Next”.
- Norton shows a QR code. Leave it on the screen and add it to the extension as described below — then enter the six-digit code from the extension and click “Next”.
Add Norton to Authenticator
- Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
- Leave the Norton page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
- The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
- Go back to Norton and type the current code into the confirmation field. If it is about to expire, wait for the next one.
- Norton confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.
No QR code, or it will not scan? Look for the option to enter a key manually on Norton’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.
Get 2FA Authenticator for Chrome — freeSave your 10 Norton backup codes
Once the authenticator is set up, Norton shows 10 single-use backup codes — click “Download” or “Print” and keep them somewhere other than this computer. You can see them again under Account Settings → Two-Factor Authentication → “Show codes”, where used ones are struck through; “Get New Codes” replaces the whole set. Next to “Backup Methods”, click “Add a new method” to add a phone number or security key as well.
The code is not accepted?
Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.
If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.
Questions
- Which authenticator app works with my Norton account?
- Any free app that produces standard six-digit codes — Norton names VIP Access, Google Authenticator and Microsoft Authenticator. No phone is needed: the Authenticator extension reads the QR code straight off the Norton page and generates the codes in Chrome.
- Why is my Norton account called “SOTP-…” in the authenticator?
- That is the name Norton gives the account in the QR code — its help shows it as NortonLifeLock with an ID such as SOTP-L2FCeFM. It is only a label. Rename it to “Norton” in the extension so you can find it; the codes do not change.
- What if I lose access to my authenticator?
- Sign in with one of your 10 backup codes, or with your backup method if you added a phone number or security key. Then set the authenticator up again. Keeping the extension’s automatic backups on means a reinstall does not cost you the account.
- Why does Norton say my code is wrong?
- Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. If it still fails, the account may have been added from an old QR code — remove it from the extension and set the authenticator up again.
Your codes, one click from the login page
Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.
Get 2FA Authenticator for Chrome — free