1PASSWORD ACCOUNT GUIDE

How to enable 2FA on 1Password

Two-factor authentication protects your 1Password account when you authorize a new device. Keep these sign-in codes outside the vault they unlock. Your account password and Secret Key are still needed.

Set up an authenticator for the account

  1. Sign in on 1Password.com. Open your name menu and choose Manage Account.
  2. Select More Actions → Manage Two-Factor Authentication → Set Up App.
  3. Save the 16-character authenticator secret securely outside your phone, for example with your Emergency Kit.

Add 1Password to Sign In

You can use Sign In, our authenticator app for codes on your iPhone.

  1. With the setup QR code on another screen, open Sign In and tap Add → Scan QR Code.
  2. Scan the code, review the account details, and tap Add Account.
  3. On 1Password.com, select Next, enter the current six-digit code from Sign In, then select Confirm.

Use the 16-character authenticator secret for manual setup. It is different from your 1Password account Secret Key. In Sign In, choose Add → Enter Setup Key, set Service to 1Password and Account to your account name, paste the secret into Key, then tap Add Account. Keep this key private.

Recover from an authorized device

If you lose the authenticator, the saved secret can restore its code entry. Alternatively, an already authorized device or browser can access the account’s two-factor settings to reset protection. Set up your replacement promptly.

Without an authorized device, follow 1Password’s account-recovery help. A family organizer or team administrator may be able to assist. An account recovery code does not itself turn off 2FA.

Security keys and organization policy

A hardware security key is another supported second factor. Business administrators can manage MFA policy, so your available settings may differ.

If a code does not work

Make sure the 1Password entry in Sign In matches the account you are using. Wait for a fresh code, then enter it before it changes. If fresh codes keep failing, check that your iPhone uses automatic date and time.

Keep a working sign-in session and your recovery information available while resolving the problem. Adding an entry to Sign In does not finish enrollment: the service must accept a code and confirm activation.

Official help