Rockstar’s list of apps has no browser extension. Will it work?

Yes. Rockstar’s list names Authy, Google Authenticator, Microsoft Authenticator and 1Password, but its setup instructions say 2-Step Verification works with a browser-based authenticator app too, and tell you to scan the QR code “using your authenticator app or option in your browser”. The Authenticator extension produces the same standard codes in Chrome.

Do I have to enter a code every time I play GTA Online?

No. Once 2-Step Verification is on, Rockstar offers to remember the device, and remembered devices skip the code on later sign-ins. Leave it off on shared or public computers.

What if I lose access to my authenticator?

Rockstar documents no backup codes — its page for a lost authenticator only points to the recovery steps of the app you used. With the extension, that means restoring one of its automatic backups or an exported backup file. If that is not possible, submit a request to Rockstar Support.

Why does Rockstar say “Incorrect verification code” (#0.200.4)?

Rockstar names three causes: the code was mistyped or expired, the clock is off, or the authenticator changed. Turn on automatic date and time and try the next code. If you switched authenticators, open Security, select “Unlink” under “2-Step Verification Device”, and set it up again with the new QR code.

Rockstar Games Authenticator App — Set Up 2-Step Verification

A Rockstar Games account holds your Rockstar Games Launcher library and the GTA Online and Red Dead Online progress linked to it, and Rockstar calls 2-Step Verification the best way to secure it. With it on, anyone signing in needs your password and the current code at the same time. A computer you trust can be remembered, so you are not asked for a code every time you play.

Turn on 2-Step Verification at Rockstar Games

Rockstar requires the email address on your account to be verified before 2-Step Verification can be set up. To finish, it asks for both the code and your account password.

Sign in to your Rockstar Games account at rockstargames.com on your computer.
Select your account icon in the upper right, then “Account”.
Select “Manage Account”, then “Security”.
Rockstar shows a QR code on the page. Leave it on the screen and add it to the extension as described below — or use the “Secret Key” option if it will not scan.
Enter the code from the extension and your Rockstar Games account password in their fields, then select “Verify”.

Rockstar Games’s own instructions

Add Rockstar Games to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Rockstar Games page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Rockstar Games and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Rockstar Games confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Rockstar Games’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Plan a way back into Rockstar Games

Rockstar’s help pages describe no backup codes. For a lost authenticator they send you to the authenticator app’s own recovery, and Rockstar strongly recommends an app with backups for exactly that reason. So keep the extension’s automatic backups on, or scan the same QR code with an authenticator on your phone before you select “Verify” — both will show the same codes. Keep the Secret Key as private as a password: the codes are made from it.

The code is not accepted?

Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.

If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Rockstar’s list of apps has no browser extension. Will it work?: Yes. Rockstar’s list names Authy, Google Authenticator, Microsoft Authenticator and 1Password, but its setup instructions say 2-Step Verification works with a browser-based authenticator app too, and tell you to scan the QR code “using your authenticator app or option in your browser”. The Authenticator extension produces the same standard codes in Chrome.
Do I have to enter a code every time I play GTA Online?: No. Once 2-Step Verification is on, Rockstar offers to remember the device, and remembered devices skip the code on later sign-ins. Leave it off on shared or public computers.
What if I lose access to my authenticator?: Rockstar documents no backup codes — its page for a lost authenticator only points to the recovery steps of the app you used. With the extension, that means restoring one of its automatic backups or an exported backup file. If that is not possible, submit a request to Rockstar Support.
Why does Rockstar say “Incorrect verification code” (#0.200.4)?: Rockstar names three causes: the code was mistyped or expired, the clock is off, or the authenticator changed. Turn on automatic date and time and try the next code. If you switched authenticators, open Security, select “Unlink” under “2-Step Verification Device”, and set it up again with the new QR code.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.