Do I need Authy for Twilio 2FA?

No. Twilio recommends its own Authy app, but says its 2FA works with any authenticator app that follows the TOTP standard, and names apps from Google and Microsoft. The Authenticator extension reads the QR code straight off the Console and generates the six-digit codes in Chrome — no phone needed.

Can I turn off two-factor authentication on Twilio?

No — Twilio’s help calls 2FA a required security feature that can’t be disabled. What you can change is the method: text message, voice call or an authenticator app. Once 2FA is on, you can also switch between methods at the code prompt with “Try another method”.

What if I lose access to my authenticator?

At the code prompt choose “Try another method” → “Recovery code”, enter it and save the new one Twilio gives you; a text message or voice call works too if your number is still on the account. Owners of upgraded accounts can reset 2FA through the “Reset MFA” web form after verifying their account details. With no code at all, submit a request through Twilio’s Help Center with your email address and Account SID. In an organization, an admin can reset 2FA for managed users.

Why does Twilio say my code is wrong?

Usually the QR code changed: if the setup was closed or started again, Twilio made a new one, and the account you added first no longer matches. Add the QR code that is on the screen now and type its code in straight away. If you have two Twilio entries in the extension, use the newest.

Twilio Authenticator App — 2FA Without Authy or SMS

A Twilio login holds your auth tokens and API keys, your phone numbers and a balance tied to your card — a hijacked account can send messages and place calls at your expense. That is why Twilio requires two-factor authentication on its accounts. You choose how the code arrives: by text message, by voice call or from an authenticator app — and an app keeps working without phone signal, abroad and when texts are delayed.

Add an authenticator app to your Twilio login

Twilio’s help describes these screens for what it calls the legacy Twilio Console, so labels may differ slightly. If you sign in to Twilio through your company’s single sign-on, Twilio’s 2FA is not used for you. Twilio SendGrid and Twilio Segment have logins of their own, with their own 2FA settings.

Sign in to the Twilio Console on your computer.
Open “User Settings” — or go straight to console.twilio.com/user/user-settings/overview. Twilio emails you a verification code: enter it and click “Verify”.
In the “Two-factor authentication (2FA)” section, click “Edit”.
Click “+ Add authentication app” at the top right.
When Twilio shows a QR code, leave that page open and add it to the extension as described below — then follow the instructions on the screen and click “Verify and save”.

Twilio’s own instructions

Add Twilio to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Twilio page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Twilio and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Twilio confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Twilio’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Keep your Twilio recovery code

When you turn on 2FA for the first time, Twilio shows one emergency recovery code, with an option to download it as a file. Store it somewhere other than this computer — Twilio suggests a password manager — because it is not shown again. If you already had 2FA by text message, your existing code still stands; if you have lost it, click “Generate new code” in User Settings, which cancels the old one. Each time you sign in with the code, Twilio gives you a new one to save.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Do I need Authy for Twilio 2FA?: No. Twilio recommends its own Authy app, but says its 2FA works with any authenticator app that follows the TOTP standard, and names apps from Google and Microsoft. The Authenticator extension reads the QR code straight off the Console and generates the six-digit codes in Chrome — no phone needed.
Can I turn off two-factor authentication on Twilio?: No — Twilio’s help calls 2FA a required security feature that can’t be disabled. What you can change is the method: text message, voice call or an authenticator app. Once 2FA is on, you can also switch between methods at the code prompt with “Try another method”.
What if I lose access to my authenticator?: At the code prompt choose “Try another method” → “Recovery code”, enter it and save the new one Twilio gives you; a text message or voice call works too if your number is still on the account. Owners of upgraded accounts can reset 2FA through the “Reset MFA” web form after verifying their account details. With no code at all, submit a request through Twilio’s Help Center with your email address and Account SID. In an organization, an admin can reset 2FA for managed users.
Why does Twilio say my code is wrong?: Usually the QR code changed: if the setup was closed or started again, Twilio made a new one, and the account you added first no longer matches. Add the QR code that is on the screen now and type its code in straight away. If you have two Twilio entries in the extension, use the newest.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.