We're on Product Hunt today! Leave a comment

Authenticator 1.15.2 is here. See what's new

Webflow authenticator app

Webflow two-factor authentication works with any authenticator app — Webflow suggests Google Authenticator, and one in your browser does the same job. Open Account settings → Security, click “Enable two-factor authentication”, and scan the QR code from the screen with the Authenticator extension.

A Webflow account opens every site in your workspaces: the Designer, the CMS, form submissions, hosting, custom domains and the billing behind them. Whoever signs in with your password can change a live site or take it down. With 2FA on, Webflow also asks for the six-digit code from your authenticator each time you sign in.

Enable two-factor authentication in Webflow

  1. Sign in to Webflow in Chrome on your computer.
  2. Click the Account dropdown in the navbar and open “Account settings” → “Security”.
  3. Click “Enable two-factor authentication”.
  4. Webflow shows a QR code: leave it on the screen, add it to the extension as described below, and enter the code from the extension to confirm.
Webflow’s own instructions

Add Webflow to Authenticator

  1. Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
  2. Leave the Webflow page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
  3. The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
  4. Go back to Webflow and type the current code into the confirmation field. If it is about to expire, wait for the next one.
  5. Webflow confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Webflow’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Save your eight Webflow backup codes

During setup Webflow shows 8 backup codes — and only then, so copy them before you move on. Each works once in place of a code. To get a new set, disable two-factor authentication and enable it again. If you run out of codes or lose them along with your authenticator, only Webflow’s customer support can turn 2FA off.

The code is not accepted?

Most often the QR code changed: the website makes a new one each time its setup page is reloaded or opened again, so the account you added first no longer matches. Start the setup again, add the QR code that is on the screen now and type its code in straight away. Two entries for the same website? Use the newest. Other reasons: why codes are refused.

Typed the key in by hand? Paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Can I use Webflow 2FA without a phone?
Yes. Webflow suggests Google Authenticator on your phone, but all it checks is the code, and any standard authenticator produces it. The Authenticator extension reads the QR code straight off Webflow’s settings and generates the codes in Chrome.
How do I turn off Webflow 2FA?
In Account settings → Security, click “Want to disable it?” and enter a current code from your authenticator to confirm. Turning it on again later gives you a new QR code and a new set of backup codes.
What if I lose my authenticator?
Sign in with one of your backup codes, then disable 2FA and set it up again. With no backup codes left, contact Webflow’s customer support — they can turn two-factor authentication off.
Why does Webflow say my code is wrong?
Usually the QR code changed: if the setup was opened again, Webflow made a new one, and the account you added first no longer matches. Add the QR code that is on the screen now and type its code in straight away. If you have two entries for Webflow, use the newest.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.

Get 2FA Authenticator for Chrome — free