- Amazon 2FA is called 2-Step Verification and is free to enable
- Use an authenticator app for the best security — avoid SMS-only verification
- Amazon also supports voice or text message codes as backup options
- Once enabled, you'll need a code each time you sign in from a new device
- Save backup codes to avoid being locked out of your Amazon account
Table of Contents
Why Enable 2FA on Amazon?
Amazon accounts are extremely valuable targets — they store saved payment methods, shipping addresses, purchase history, and often Amazon Pay access. A compromised account can result in fraudulent orders, gift card purchases, or unauthorized charges. Amazon calls their 2FA system "Two-Step Verification" (2SV), but it works exactly like standard 2FA: your password plus a one-time code.
Here is everything a single Amazon account can give an attacker access to:
- Saved payment methods — credit cards, debit cards, and gift card balances that can be spent instantly
- Address book — your home, work, and other saved shipping addresses
- Alexa devices — voice history, connected smart home devices, shopping lists, and music preferences
- Amazon Pay — linked accounts at thousands of third-party merchants that accept Amazon Pay
- Prime membership — account settings, subscription management, and streaming preferences
- Order history — detailed purchase records that can be used for social engineering attacks
- Kindle library — purchased books, documents, and reading progress
- AWS access — if your Amazon account is also linked to an AWS account, the damage can extend to cloud infrastructure
Without 2FA, your entire digital life on Amazon is protected by a single password. If that password is compromised in a data breach or phishing attack, an attacker can sign in from anywhere in the world and start placing orders. 2-Step Verification adds a second layer that makes remote account takeover significantly harder.
If you're new to two-factor authentication, start with our introduction to 2FA guide to understand how it works across different services.
Amazon does not provide backup codes. If you lose access to both your primary phone and backup number, you'll need to contact Amazon Customer Service. Make sure you add a backup phone number during setup.
Amazon 2-Step Verification vs Standard 2FA
Amazon's implementation of two-factor authentication differs from services like Google or GitHub in several notable ways:
| Feature | Amazon 2SV | Standard 2FA |
|---|---|---|
| Backup codes | Not available | Usually provided |
| Hardware security keys | Not supported | Often supported (FIDO2/WebAuthn) |
| Authenticator app | Yes (TOTP) | Yes (TOTP) |
| SMS codes | Primary option | Usually an option |
| Voice call codes | Available as backup | Rare |
| Trusted device option | Yes (browser cookie) | Yes |
| Alternate sign-in method | Password+OTP field trick | Varies by service |
The key takeaway: Amazon's 2SV works like standard TOTP-based 2FA, but lacks backup codes and hardware key support. For the best experience, pair an authenticator app with a backup phone number. See our recommended best authenticator apps for 2026 to pick the right one.
Step-by-Step Setup (SMS Method)
This is the quickest way to enable 2-Step Verification on Amazon using a text message code.
Go to amazon.com and sign in to your account on a desktop or mobile browser.
Hover over Account & Lists in the top-right corner and click Account. Or, go directly to amazon.com/account.
On the Your Account page, click Login & security.
Scroll down to the Advanced Security Settings section and click the Edit button next to it.
On the Two-Step Verification page, click Get Started.
Select Phone Number as your preferred method. Enter your mobile number and click Send OTP. Enter the code you receive and click Verify code and continue.
Amazon requires a backup number. Enter a second phone number (a different phone or a family member's) and verify it the same way.
Review the summary screen, then click "Got it. Turn on Two-Step Verification." Your account is now protected.
2-Step Verification is now active. The next time you sign in from a new device or browser, Amazon will send a code to your phone.
Setup with an Authenticator App
An authenticator app is more secure than SMS because codes are generated locally on your device and can't be intercepted.
On the Two-Step Verification setup screen, select Authenticator App instead of Phone Number.
Open your authenticator app (Google Authenticator, Authy, Microsoft Authenticator, etc.) and scan the QR code displayed by Amazon. If you prefer, tap "Can't scan the bar code?" to get a text key you can enter manually.
Your authenticator app generates a 6-digit code. Enter it in the Amazon field and click Verify OTP and continue.
Amazon will prompt you to add a phone number as a backup. This is important — if you lose your authenticator app, the backup phone is your only recovery path. Add one and verify it.
Click "Got it. Turn on Two-Step Verification" to finish.
Adding a Backup Method Later
If you want to add or change your backup phone number later, go to Account → Login & Security → Advanced Security Settings → Edit. There you'll find a Back-up methods section where you can add a new phone number.
Trusted Devices — Skip 2FA on Devices You Use Regularly
After successfully completing 2FA on a device, Amazon will ask if you'd like to skip 2FA on that device in the future. Check the "Don't require OTP on this browser" box to mark it as trusted. Amazon will remember the device via cookies — if you clear your browser cookies, you'll be prompted for 2FA again on the next sign-in.
Don't mark shared or public computers as trusted devices. Only mark personal devices that only you use.
How to Disable Amazon 2FA
To turn off 2-Step Verification, go to Account → Login & Security → Advanced Security Settings → Edit, then click Disable next to Two-Step Verification and confirm your choice.
Troubleshooting Amazon 2FA Issues
Not Receiving SMS Codes
If Amazon's SMS codes aren't arriving, first check that your mobile number is correct in Account → Login & Security → Advanced Security Settings. Make sure your phone has cellular signal and that you haven't blocked Amazon's SMS short code. As a workaround, click "Try alternate sign-in" on the login screen and enter your password followed by the 6-digit code in the password field (e.g., YourPassword123456).
Authenticator App Codes Aren't Working
Authenticator app codes expire every 30 seconds. If your code doesn't work, wait for the next cycle and try again. Also verify your phone's time is set to automatic — TOTP codes are time-based, and a clock drift of even a few seconds can cause mismatches. If you still have trouble, you may need to delete and re-add the authenticator entry by re-scanning the QR code from Advanced Security Settings.
Can't Sign In After Enabling 2FA on a New Device
If you're stuck on the 2FA prompt on a new device and don't have access to your primary 2FA method, click "Having trouble?" or "Try another way to sign in" on the login screen. Amazon will offer your backup phone number as an alternative. If you haven't set up a backup method, you'll need to go through Amazon's account recovery process, which can take several days.
2FA Prompt Keeps Appearing on the Same Device
If Amazon asks for a 2FA code every time you visit — even after checking "Don't require OTP on this browser" — your browser cookies may be clearing automatically. Check your browser's privacy settings to ensure cookies for amazon.com are not being deleted on exit. Some ad blockers or privacy extensions can also interfere with Amazon's trusted device cookie.
Frequently Asked Questions
Can I set up Amazon 2FA on the mobile app?
Does Amazon provide backup codes?
What's the "Alternate Sign-in" method Amazon mentions?
Will 2FA affect Amazon Alexa or other devices?
Can I use Amazon 2FA on multiple accounts?
What happens if I lose my phone after enabling Amazon 2FA?
Does Amazon support hardware security keys like YubiKey?
Is SMS 2FA on Amazon safe enough?
Will 2FA affect my Amazon recurring subscriptions or automatic payments?
Free TOTP Code Generator
Need to generate 2FA codes without an app? Our free browser-based TOTP generator works instantly — no install required.
Try the 2FA Code Generator →