Two-step verification (MFA) keeps your Odin Key account, and the keys in it, safe even if someone learns your password.
1. Turn it on
Open My account, then the MFA security tab, and follow the steps: scan the QR code with an authenticator app (for example Google Authenticator, Microsoft Authenticator, Aegis or Authy), then enter the 6-digit code it shows. From then on, signing in requires your password and a code.
2. Keep your recovery codes
When you turn it on, you receive recovery codes. Save them offline (printed, or in a password manager). Each code works only once and lets you sign in if you lose your phone.
3. Lost your phone and your codes?
Write to [email protected] from the e-mail address of your account. Before turning two-step verification off, we will ask you to confirm your identity (for example with details of a past order). This can take a little time, which is why keeping your recovery codes matters.
4. Other good habits
- Use a long, unique password for your account.
- Odin Key will never ask for your password or your code by e-mail or chat.
- Do not share your keys: they are in your account and in the delivery e-mail.
- Sign-in with Steam is not available for accounts protected by two-step verification: use your password and your code. If you sign in with Google or Facebook, protect that account too.