Two-step verification

With two-step verification, signing in with your password also needs a 6-digit code from an authenticator app on your phone. Even someone who knows your password cannot get in without it.

Before you start

• You need an e-mail account with a confirmed e-mail address. Guest accounts cannot use two-step verification.
• Install an authenticator app, for example Google Authenticator, Microsoft Authenticator, Aegis or 1Password.

Turn it on

1. Open Settings > Security > Two-step verification in the app, or Account > Security > Two-step verification on the website.
2. Enter your password.
3. Add SmsGrab to your authenticator app, with one tap on your phone or by typing the setup key.
4. Enter the 6-digit code that your authenticator app shows.
5. Save your 10 recovery codes. They are shown only once.

We send you an e-mail whenever two-step verification is turned on or off.

Signing in

After your password, SmsGrab asks for the current code from your authenticator app. A new code appears every 30 seconds. Signing in on the website with a code from the app does not ask for it again, because that already needs your signed-in phone.

Recovery codes

• Each recovery code works once, in place of an app code.
• Keep them somewhere safe, such as a password manager, and not only on the same phone.
• You can create a new set at any time with your password and an app code. The old set stops working immediately.
• SmsGrab shows how many recovery codes you have left.

Lost your phone?

Sign in with your password and one of your recovery codes. Then turn two-step verification off and on again with your new phone, and create new recovery codes. If you have neither your authenticator app nor a recovery code, contact support from your account's e-mail address.

Too many wrong codes

After several wrong codes, the second step is locked for a while to stop guessing. Wait a few minutes, then try again with the newest code from your app.