Do I need the Square Enix Software Token app?

No. New registrations for the Software Token closed on 21 November 2023. The “Software Authenticator” option takes Google Authenticator, Microsoft Authenticator and similar apps — and the Authenticator extension produces the same six-digit codes in Chrome.

Can I use the Square Enix One-Time Password without a phone?

Square Enix lists a smartphone as a requirement because it expects the app to run on one, but what the account checks is the six-digit code. The extension reads the QR code straight off the Account Management page and makes the codes on your computer.

Does it protect my FINAL FANTASY XIV account?

Yes. The One-Time Password is registered on the Square Enix account your FINAL FANTASY XIV service account belongs to, so once it is on, logging in with that account asks for the six-digit code along with your ID and password.

What if I lose access to my authenticator?

Go to Square Enix’s emergency removal page and enter your Emergency Removal Password to remove the Software Authenticator, then register it again. Without that password, contact the Support Center through its form. Keeping the extension’s automatic backups on means a reinstall does not put you there.

Square Enix Authenticator App — Set Up One-Time Password 2FA

Your Square Enix account holds your FINAL FANTASY XIV service account — characters, subscription and everything bought for them — and a stolen password is how such accounts are lost. With a One-Time Password registered, Square Enix asks for your ID, your password and the six-digit code from your app when you log in, so a password alone is no longer enough.

Register a Software Authenticator on your Square Enix account

Square Enix allows one One-Time Password method at a time: if a Security Token (key ring type) or the Square Enix Software Token is already registered, remove it first. New registrations for the Software Token app closed on 21 November 2023 — Square Enix points to the Software Authenticator option instead.

Log in to the Square Enix Account Management System on your computer.
Open the “Services and Options” menu and select “One-Time Password”.
At the bottom of the One-Time Password page, select “Software Authenticator (Google Authenticator, Microsoft Authenticator, etc.)” and follow the on-screen instructions to the page with the QR code.
When Square Enix shows a QR code, leave that page open and add it to the extension as described below — then select “Next” and enter the six-digit one-time password. “Unable to Scan QR Code” shows the authentication key instead.

Square Enix’s own instructions

Add Square Enix to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Square Enix page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Square Enix and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Square Enix confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Square Enix’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Write down your Emergency Removal Password

Square Enix’s help does not describe backup codes; its way back is the Emergency Removal Password. It is shown on the main page of the Account Management System after you log in — write it down now and keep it away from this computer, because once you cannot log in, you cannot see it either. If you lose your authenticator, the emergency removal page takes that password and removes the Software Authenticator, so you can log in and register it again. Without it, the account holder has to contact the Square Enix Support Center through its form.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Do I need the Square Enix Software Token app?: No. New registrations for the Software Token closed on 21 November 2023. The “Software Authenticator” option takes Google Authenticator, Microsoft Authenticator and similar apps — and the Authenticator extension produces the same six-digit codes in Chrome.
Can I use the Square Enix One-Time Password without a phone?: Square Enix lists a smartphone as a requirement because it expects the app to run on one, but what the account checks is the six-digit code. The extension reads the QR code straight off the Account Management page and makes the codes on your computer.
Does it protect my FINAL FANTASY XIV account?: Yes. The One-Time Password is registered on the Square Enix account your FINAL FANTASY XIV service account belongs to, so once it is on, logging in with that account asks for the six-digit code along with your ID and password.
What if I lose access to my authenticator?: Go to Square Enix’s emergency removal page and enter your Emergency Removal Password to remove the Software Authenticator, then register it again. Without that password, contact the Support Center through its form. Keeping the extension’s automatic backups on means a reinstall does not put you there.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.