Two-factor authentication and passkeys

Written by

in

,
Two-factor authentication (2FA) asks for a second step after you sign in: a code from an authenticator app, a code sent to your email, or a passkey. It applies to every way you sign in, including Google, Discord, Facebook, Steam and email codes. Turn it on in Settings under Security, and save your recovery codes.

Turn on two-factor authentication

  1. Go to Settings and open the Security tab.
  2. Under Two-Factor Authentication, select Setup next to Authenticator App or Email Verification.
  3. If your account has a password, enter it and select Continue.
  4. For an authenticator app, scan the QR code with Google Authenticator, Authy or a similar app. Select Can’t scan? to type the code in by hand instead.
  5. Enter the 6-digit code from the app or from the email, then select Enable 2FA.
  6. Copy your 2FA Recovery Codes and store them somewhere safe.

We email you whenever two-factor authentication is turned on or off.

Open Settings
Your recovery codes are the only way back in on your own if you lose your authenticator app. Each code works once. Store them outside your phone, for example in a password manager.

Signing in with 2FA on

After your password, email code or social login, PlayerBay asks for your second factor. Enter the code from your app or email, or select Use a backup code.

Tick Trust this device for 30 days on a device only you use. On a trusted device, you aren’t asked for the second factor again until the trust runs out.

Passkeys

A passkey lets you sign in with your fingerprint, face or device PIN, with no password or code. A passkey counts as your second factor, so signing in with one never asks for a code.

  1. In Settings, open Security.
  2. Under Passkeys, select Add a passkey and follow your device’s prompt.

You can rename or remove a passkey there. To sign in with one, select Sign in with a passkey on the sign-in page.

Switch methods or turn 2FA off

Under Two-Factor Authentication, select Switch to this method on the other method, or Disable 2FA. You confirm with your password, if you have one, and a current code.

Lost access to your second factor

  • Sign in and use one of your recovery codes, then set up 2FA again.
  • If you use email codes, check that you can still open your inbox.
  • If you have neither, contact support. Before we remove 2FA, we check it’s you: send a selfie holding a valid ID and a piece of paper with today’s date written on it. If you’re a verified seller, we compare it with your seller verification.
Contact support

Yes. Every sign-in method asks for your second factor, unless you sign in with a passkey or on a trusted device.

No. PlayerBay staff never ask for your password, sign-in codes or 2FA codes. Anyone asking for one in chat or by phone isn’t us.

Settings, Security, Active Sessions lists every device signed in to your account. Select Sign Out All to end them all.