Can I use Upwork two-step verification without a smartphone?

Yes. The authenticator option takes any app that produces standard time-based codes (TOTP), and Upwork does not check which device runs it. The Authenticator extension generates the codes in Chrome on your computer and reads the QR code straight off the Password & Security page.

Which authenticator app works with Upwork?

Upwork names Google Authenticator and says many mostly free apps work, since the codes follow a standard. That includes Microsoft Authenticator, Authy, 2FAS and browser extensions like this one.

When does Upwork ask for the code?

At login, when you open certain parts of the account such as settings or payments, and whenever you add, edit or turn off a verification method. Signing in with face or fingerprint recognition does not replace it: Upwork says those log you in but cannot pass a two-step verification check.

What if I lose access to my authenticator?

Choose another method you turned on — the security question, a text message or the mobile app prompt — then turn the “Authenticator app code” toggle off and on again in Password & Security and add the new QR code. If no method works, contact Upwork Support.

Upwork Authenticator App — Set Up Two-Step Verification

An Upwork account holds your contracts, client messages, earnings and the method your money is paid out to. A hijacked account can be used to scam clients in your name or redirect payments. With an authenticator app on, Upwork asks for the six-digit code at login and when you open sensitive areas such as settings or payments.

Turn on the authenticator app in Upwork

Upwork lets you turn on several methods at once — an authenticator app, a mobile app prompt, a text message (not to a VoIP number) and a security question — and recommends more than one as a backup. Once one method is on, Upwork asks you to verify with it before you add, edit or turn off another.

Sign in at upwork.com on your computer.
Go to “Settings” → “Password & Security”.
Turn on the toggle next to “Authenticator app code” and complete two-step verification if Upwork asks for it.
When Upwork shows a QR code, leave that page open and add it to the extension as described below — or copy the secret key for manual entry.
Enter the six-digit code from the extension and choose “Verify”.

Upwork’s own instructions

Add Upwork to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Upwork page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Upwork and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Upwork confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Upwork’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Set up a second way to verify on Upwork

Upwork does not hand out backup codes. Its backup is another method: answer a security question, add a phone number for text messages, or turn on the mobile app prompt in the same “Password & Security” settings — when Upwork asks for verification, you can pick any method you have on. Our advice: add at least the security question, and keep the extension’s automatic backups on.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Can I use Upwork two-step verification without a smartphone?: Yes. The authenticator option takes any app that produces standard time-based codes (TOTP), and Upwork does not check which device runs it. The Authenticator extension generates the codes in Chrome on your computer and reads the QR code straight off the Password & Security page.
Which authenticator app works with Upwork?: Upwork names Google Authenticator and says many mostly free apps work, since the codes follow a standard. That includes Microsoft Authenticator, Authy, 2FAS and browser extensions like this one.
When does Upwork ask for the code?: At login, when you open certain parts of the account such as settings or payments, and whenever you add, edit or turn off a verification method. Signing in with face or fingerprint recognition does not replace it: Upwork says those log you in but cannot pass a two-step verification check.
What if I lose access to my authenticator?: Choose another method you turned on — the security question, a text message or the mobile app prompt — then turn the “Authenticator app code” toggle off and on again in Password & Security and add the new QR code. If no method works, contact Upwork Support.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.