How do I set up Authenticator app 2FA?

Summary

Authenticator app Two-Factor Authentication (2FA) adds a second verification step to your Bitvavo login using a six-digit code that refreshes every 30 seconds. You can enable it on its own or alongside Push notification 2FA.

Introduction

With Authenticator app 2FA, you sign in using your email address and password (first factor) and then enter a 2FA code from an authenticator app on your phone (second factor). Examples include Google Authenticator and Authy. You can keep Push notification 2FA enabled as well for quick approvals.

Set up Authenticator app 2FA

1. Open the Bitvavo app and go to 'Security' in your settings.
2. Tap 'Enable 2FA'.
3. Enter your Bitvavo account password.
4. Open your authenticator app and scan the QR code shown in Bitvavo (or enter the code manually).
5. Copy and safely store your 2FA recovery code.
6. Enter the six-digit 2FA code from your authenticator app to confirm.
7. Done - Authenticator app 2FA is now enabled.

Keep your recovery code safe

During set-up you receive a 2FA recovery code. This code lets you regain access to your account if you lose your 2FA device. Store it offline in a secure place. Do not share it.

Troubleshooting 2FA codes

1. Multiple set-ups on one device: Make sure the code you enter belongs to your Bitvavo account and not another service.
2. Incorrect device time: Codes rely on your phone’s time. Set your phone’s date and time to automatic and confirm the correct time zone.

If issues persist, you can reset your 2FA (see below).

Reset Authenticator app 2FA

If you cannot log in because you no longer have the phone with your authenticator app, you can reset 2FA. This removes the 2FA layer so you can log in using only your email address and password.

Use this if your phone is lost or stolen, you have a new phone, or the app was deleted.

1. Enter your email address and password and tap 'Reset 2FA'.
2. You’ll receive an email and an SMS on your phone number.
3. Open the email and tap the confirmation link.
4. Enter the SMS code and tap '2FA Reset'. 2FA will be disabled.

If you cannot receive the SMS

If you do not have access to your phone number or you are not receiving the SMS to reset 2FA, please go through the re-verification steps at the bottom of this support article.

Move Authenticator app 2FA to a new phone

Google Authenticator

1. Log in to the Bitvavo app with your email, password, and a 2FA code from your old device.
2. Go to 'Security' and tap 'Disable 2FA'.
3. Install Google Authenticator on your new phone.
4. Back in the Bitvavo app, tap 'Enable 2FA' and link it to your new authenticator app.
5. Enter the 2FA code shown on your new phone to finish setup.

After these steps, your Authenticator app 2FA is active on your new device.

Authy app

1. Install Authy on your new device.
2. Register using the same phone number you used before.
3. Complete Authy’s registration steps.
4. Your Bitvavo token appears automatically after registration is complete.

Use Authenticator app 2FA on two phones

You can use Authenticator app 2FA on more than one device. In Google Authenticator, go to 'Transfer accounts' → 'Export accounts' to generate a QR code, then scan it on your second device ('Import existing account'). Both phones will generate the same 2FA codes.

Download an authenticator app

Google Authenticator

Install from the App Store (iOS) or Google Play (Android). Then:

1. Tap the '+' button.
2. Select 'Scan a QR code' (or enter the code manually) and point the camera at Bitvavo’s QR.
3. Your Bitvavo 2FA code will appear and refresh every 30 seconds.
4. Save any restore codes offered by the app in case your device is lost.

We recommend not enabling Google Cloud sync for the Authenticator app, as it may increase risk exposure. Read more in this blog post.

Authy

Install from the App Store (iOS) or Google Play (Android). Then:

1. Tap '+ Add Account'.
2. Select 'Scan a QR code' (or enter the code manually).
3. Choose the correct logo and name the account.
4. Your Bitvavo 2FA code will appear and refresh every 30 seconds.
5. Save any restore codes offered by the app.

Microsoft Authenticator

Install from the App Store (iOS) or Google Play (Android). Then:

1. Tap the '+' button.
2. Select 'Scan a QR code' (or enter the code manually) and point the camera at Bitvavo’s QR.
3. Your Bitvavo 2FA code will appear and refresh every 30 seconds.
4. Save any restore or back-up options offered by the app in case your device is lost.

Other options

• LastPass Authenticator

Stay alert to phishing

If you receive an unexpected SMS about a 2FA reset including a phone number, it did not come from Bitvavo. We do not send unsolicited SMS with phone numbers to call.

FAQ