It’s more secure than text messages for two-factor authentication.

Here is the promised part two on how to set up two-factor authentication with an authentication app. I originally wrote this in October 2020, but there have been some slight changes to the names of menus so I am updating it.

If you missed part one on finding your one-time-use backup code, check that out first. You should have it on hand because Twitter is removing the option to have the verification codes sent by text message in March 2023 except for people paying for Twitter Blue. The good news is that an authentication app is more secure than using text messages.
(It does seem bizarre that you can pay a monthly membership fee to use a less secure authentication method, but that’s Twitter for you.)

Step 1

On the PC, choose More from the Main Menu that is on the side of your screen. (I highlighted the option to make it stand out.)

 

Twitter Main Menu, choose the menu option for More

Step 2 

From the menu that popped up when you chose More,
select the Settings and Support option, then
select the Settings and privacy option. 

 

The Twitter More Menu on PC, Choose Settings and privacy from it

Step 3 

Click “Security and account access” on the left to expand it, then choose “Security” on the right. 

 

Twitter Menu 3 - Choose Account on left and Security on right

Step 4 

On the Security menu that pops up, choose Two-factor authentication“.

 

Twitter Security Menu, choose two-factor authentication

Step 5 

Check the box for “Authentication app” near the top of the “Two-factor authentication” menu.

You’ll need to install an authentication app on your phone before proceeding. I’ve used both Google’s and Microsoft’s for various accounts, but there are also other options that you can find by searching the app store.

NOTE: If you didn’t get your emergency backup authentication code yet, do that first.

Twitter Two-factor authentication menu select Authentication App

Step 6 

This dialog box pops up next. If you have an authentication app on your phone, go ahead and click  Start.

If you don’t yet have an app, look over your options in the app store and install one.

Open it and log in (if you choose Google or Microsoft, you can use an existing account to log into the authenticator app.

This is a different login than your Twitter account; it’s just for the app. If you don’t have an account to use with the app, create one. Do not use the same username and password as your Twitter account.

Once you are logged in, for Microsoft, tap the dots in the upper right to get a menu, then choose “Add account”, then “Other account” and the scanner will open for the next steps. 

For Google, tap the colorful plus sign in a circle that’s in the lower right corner then tap “Scan a QR code” and you’ll be ready for the next steps. 

Dialog box from Twitter about authentication apps

Step 7 

After you’ve clicked Start, you’ll be prompted for your password. If you have it saved in your devices and thus haven’t typed it recently, make sure you remember it before doing this or you might need that backup code sooner than you thought. 🙂

Twitter dialog box to enter password before accessees the authenticator app setup

Step 8

This dialog box will pop up with a QR code below the text for scanning with your chosen authenticator app. Because the QR code links to the account, I didn’t think I should do a screen grab of mine. 🙂

It should give you a passcode to enter if you can’t scan, but it’s easiest to do the Twitter end on a PC and scan it with the Authenticator app on your phone.

Important: You scan from within the authenticator app after choosing to add an account, not from a 3rd party QR reader. Open your authenticator app, choose to add an account, and scan the code.

Twitter QR Code dialog box

Step 9

After you’ve scanned and your Twitter account has linked to the app, it will want you to enter a code from the authenticator to verify that it is working.

Each code changes after 30 seconds for both Microsoft and Google so if the timer is running down, you may want to wait for a fresh code.

(I haven’t used any other authentication apps, so can’t comment on their settings. I suspect 30 seconds might be industry standard.)

 

Dialog box to test that it linked correctly

Step 10

After you enter your verification code and hit that Verify button in the last step, this will pop up to verify that everything is connected and works, and to give you a one-time-use backup code that you should write down and keep in a safe spot.

This single use code will be the same as the one you generated earlier. Or, it should be – best to double check it before you close this box!

Again, jot it down in a safe place in case your phone is lost or dies and you need to access your account on a different device. 

Final dialog box confirming it worked and giving a backup code

 And you’re done!

Reminder: That backup code can only be used ONCE. If you have to use it to access your account, be sure to immediately go through the steps to generate a new code and jot that one down somewhere safe for the next time.

Image Credits: screenshots are all by Jennifer Yuen, keyboard image is from Stencil and used with permission.