Can I use Wikipedia 2FA without a phone?

Yes. Wikimedia’s own help recommends a desktop app if you have no smartphone, and any app that produces standard codes works. It notes this is slightly less safe, since someone with your computer and your password could sign in — so turn on the extension’s password protection.

Who can turn on two-factor authentication on Wikipedia?

Every registered user, since December 2025 — before that it was limited to certain user groups. Since 2025 the Wikimedia Foundation requires it for some groups with extended rights, and from 2026 private wikis are open only to users with 2FA on.

What if I lose access to my authenticator?

Sign in with one of your recovery codes, add a new authentication method, then remove the old one on Special:AccountSecurity. Without recovery codes, the last resort is emailing ca@wikimedia.org from your account’s email address — and Wikimedia does not guarantee it can restore access.

Why does Wikipedia say my code is wrong?

Check the computer clock first: Wikimedia notes codes can fail with a time difference of just two minutes. Turn on automatic date and time and try the next code. If it still fails, remove the account from the extension and add the authenticator app again.

Wikipedia Authenticator App — Enable Two-Factor Authentication

A Wikipedia account is your edit history and reputation, and for administrators and other users with extended rights it is a set of tools a vandal would love to have — which is why the Wikimedia Foundation now requires 2FA for some of those groups. With 2FA on, a stolen password is not enough to sign in, and Wikipedia stops asking you to verify sign-ins by email.

Turn on two-factor authentication on Wikipedia

One Wikimedia account signs you in to every Wikipedia and its sister projects such as Commons, Wiktionary and Meta, and 2FA set up on it covers them all; only the private wikis need their own. Wikimedia does not offer codes by SMS. Bots and tools such as AutoWikiBrowser cannot ask for a code — use bot passwords or OAuth for them.

Sign in to Wikipedia on your computer.
Go to “Special:AccountSecurity” — or follow the link to it from your “Preferences”. Wikipedia may ask you to confirm it is you.
Click “Add an authenticator app”.
Give the app a name, so you can tell it apart if you add more than one.
Wikipedia shows a QR code — and, if you cannot scan it, the secret key and account name. Leave it on the screen and add it to the extension as described below.

Wikipedia’s own instructions

Add Wikipedia to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Wikipedia page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Wikipedia and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Wikipedia confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Wikipedia’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Save your ten Wikipedia recovery codes

When you turn 2FA on, Wikipedia gives you ten recovery codes — download or print them and keep them somewhere other than this computer. Each code works once; on the sign-in prompt choose to use recovery codes. You can see them again, or create a new set (the old one stops working), on Special:AccountSecurity. Adding more apps or security keys does not create more codes.

The code is not accepted?

Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.

If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Can I use Wikipedia 2FA without a phone?: Yes. Wikimedia’s own help recommends a desktop app if you have no smartphone, and any app that produces standard codes works. It notes this is slightly less safe, since someone with your computer and your password could sign in — so turn on the extension’s password protection.
Who can turn on two-factor authentication on Wikipedia?: Every registered user, since December 2025 — before that it was limited to certain user groups. Since 2025 the Wikimedia Foundation requires it for some groups with extended rights, and from 2026 private wikis are open only to users with 2FA on.
What if I lose access to my authenticator?: Sign in with one of your recovery codes, add a new authentication method, then remove the old one on Special:AccountSecurity. Without recovery codes, the last resort is emailing ca@wikimedia.org from your account’s email address — and Wikimedia does not guarantee it can restore access.
Why does Wikipedia say my code is wrong?: Check the computer clock first: Wikimedia notes codes can fail with a time difference of just two minutes. Turn on automatic date and time and try the next code. If it still fails, remove the account from the extension and add the authenticator app again.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.