PayPal

How to Enable Two-Factor Authentication on PayPal

2026-02-01 · 5 min read · Steven Adams · Last reviewed: March 2026

Table of Contents

  1. Why Enable 2FA on PayPal?
  2. Before You Start
  3. Enable 2FA via SMS
  4. Enable 2FA via Authenticator App
  5. Signing In with 2FA Active
  6. How to Turn Off PayPal 2FA
  7. FAQ

Why Enable 2FA on PayPal?

PayPal is one of the most targeted accounts for hackers because it provides direct access to money. Stolen PayPal credentials are sold on dark web markets every day. A compromised account can result in unauthorized payments, drained balances, or fraudulent purchases — often before the real owner even notices.

PayPal's 2-step verification (their name for 2FA) means that even if someone steals your email and password, they still can't log in without the second factor — a code sent to your phone or generated by your authenticator app.

Before You Start

A few things to know before enabling PayPal 2FA:

  • PayPal 2FA setup must be done through a web browser — it cannot be set up inside the PayPal mobile app.
  • You'll need either a mobile phone (for SMS) or an authenticator app already installed.
  • You can only have one active 2FA method at a time on PayPal — either SMS or an authenticator app, not both simultaneously.

PayPal's 2FA setup is only available via a web browser, not the mobile app. Open paypal.com on your phone or computer browser to complete these steps.

Enable PayPal 2FA via SMS

1 Log In to PayPal

Go to paypal.com and sign in to your account in a web browser.

2 Open Settings

Click the ⚙️ Settings (gear) icon in the top-right corner of the page.

3 Go to Security

Click Security in the top navigation bar of your account settings.

4 Click Set Up next to 2-Step Verification

In the Security section, find 2-step verification and click Set Up to the right of it.

5 Choose "Text me a code"

Select Text me a code and click Set It Up.

6 Enter Your Phone Number

Select your country code and enter your mobile phone number, then click Next. PayPal will send a 6-digit code to that number.

7 Enter the Code and Confirm

Enter the 6-digit code from the text message and click Confirm. You'll see a confirmation message that 2-step verification has been successfully added. Click Done.

SMS 2FA is now active on your PayPal account. Every login from an unrecognized device will require the code texted to your phone.

Enable PayPal 2FA via Authenticator App

Using an authenticator app is more secure than SMS — codes are generated offline and can't be intercepted by SIM-swap attacks. PayPal supports any standard TOTP app including Google Authenticator, Microsoft Authenticator, and Authy.

1 Go to Security Settings

Follow steps 1–4 from the SMS section above to reach the 2-step verification setup page.

2 Select "Use an authenticator app"

On the verification method screen, choose Use an authenticator app and click Set It Up.

3 Scan the QR Code

PayPal displays a QR code. Open your authenticator app, add a new account, and scan the QR code. Alternatively, click "Can't scan the QR code?" to get a text key you can enter manually into your app.

4 Enter the 6-Digit Code

Your authenticator app will immediately generate a 6-digit TOTP code. Enter it in the PayPal confirmation field under "Step 2" and click Confirm.

5 Click Done

PayPal confirms that 2-step verification has been successfully added. Click Done. You can optionally add a second device by clicking "Add another device" before finishing.

Consider adding a second authenticator device as a backup (e.g., a tablet or second phone) in case you lose your primary device. You can do this immediately after setup by clicking "Add another device."

Signing In with 2FA Active

Once 2-step verification is enabled, here's what happens each time you sign in to PayPal from a new or unrecognized device:

  1. Enter your email and password as usual.
  2. PayPal sends you a code via SMS, or you open your authenticator app for the code.
  3. Enter the 6-digit code on the PayPal verification screen.
  4. You're signed in. PayPal may give you the option to trust this device to skip 2FA in future.

How to Turn Off PayPal 2FA

If you need to disable 2-step verification, go to Settings → Security and click Turn Off next to 2-step verification. Click the Turn It Off button to confirm.

PayPal may recommend enabling passkeys or keeping the mobile app signed in as additional security measures if you disable 2FA. Without 2FA, your account is protected only by your password.

Frequently Asked Questions

Can I set up PayPal 2FA on the mobile app?
No. PayPal's 2-step verification setup is only available through a web browser. Open paypal.com on your phone's browser (not the app) to complete the setup.
Can I use both SMS and an authenticator app?
PayPal currently allows only one active 2FA method at a time. You can switch between SMS and authenticator app, but you cannot have both active simultaneously. Some users work around this by adding a backup device to their authenticator app.
What if I'm not receiving the SMS code?
Check that your phone has signal and that the number on file is correct. Wait about a minute before requesting another code. If you're traveling internationally, carrier issues may block short-code SMS — consider switching to an authenticator app instead.
What happens if I lose my phone?
If you lose access to your 2FA method, you'll need to contact PayPal customer support to regain access to your account. This process involves identity verification. Always keep your recovery email and personal details up to date on PayPal.
Does PayPal 2FA also protect PayPal payments?
Yes. 2FA protects the login step, which is the primary gate to your account. Once logged in, PayPal may also trigger MFA challenges for certain high-risk actions like sending large amounts or updating payment methods.

Free TOTP Code Generator

Want to generate 2FA codes without an app? Our free browser-based TOTP generator works instantly — no installation needed.

Try the 2FA Code Generator →