Account security and two-factor authentication
Protect your Chat Buddy account with an authenticator app, one-time recovery codes and trusted-device controls. Two-factor authentication adds an extra login check so a password alone is not enough to enter your account.
You may be asked to sign in before opening your security settings.
Simple setup
Protect your account in about one minute
Chat Buddy guides you through the process. You do not need specialist knowledge, and the authenticator app can be free.
Open an authenticator app
Use a compatible app such as Google Authenticator, Microsoft Authenticator or 2FAS. Open the app and choose the option to add a new account.
Authenticator apps generate codes on your phone and do not require text messages.Add Chat Buddy
Tap the button to open your authenticator app, scan the QR code, or copy the setup key manually when scanning is unavailable.
Keep the setup key private. Anyone who has it may be able to generate valid codes.Confirm the six-digit code
Enter the newest six-digit number shown for Chat Buddy. After confirmation, save the recovery codes displayed on screen.
Each recovery code works once and should be stored away from your phone.Protected login
What changes when you sign in?
Your username and password remain the first step. When Chat Buddy needs an additional check, you then enter a current code from your authenticator app.
Recovery and control
You remain in control of your protection
Registered members can review their remaining recovery codes, remove trusted devices and update their two-factor settings from the security page.
Recovery codes
Chat Buddy creates eight one-time recovery codes. An unused code can replace the authenticator code when your phone is unavailable.
Trusted devices
See how many trusted devices remain active and forget all of them immediately if a phone or computer is lost, sold or no longer private.
New recovery codes
Create a replacement set after entering your current authenticator code. The previous recovery codes then stop working.
Safe security habits
Protect the account, the app and the recovery route
Recommended
- Use a unique Chat Buddy password that you do not reuse elsewhere.
- Enable two-factor authentication on your registered account.
- Save recovery codes somewhere secure and separate from your phone.
- Keep your phone protected with a passcode, fingerprint or face unlock.
- Remove trusted devices when you no longer control them.
- Check that your phone date and time are set automatically.
Never share
- Your Chat Buddy password.
- A six-digit authenticator code.
- A recovery code.
- The QR code or manual setup key.
- Screenshots that reveal security codes or account details.
- Codes requested by another user in public or private chat.
Questions and answers
Account security FAQ
Open a question for a straightforward explanation of Chat Buddy’s authenticator-app protection.
What is two-factor authentication?
Two-factor authentication, often shortened to 2FA, adds a second login check. After your password is accepted, Chat Buddy may also require a current code generated by the authenticator app on your phone.
Is Chat Buddy two-factor authentication free?
Yes. Chat Buddy does not charge you to enable authenticator-app protection, and compatible authenticator apps are available free of charge.
Which authenticator apps can I use?
You can use a compatible TOTP authenticator app, including Google Authenticator, Microsoft Authenticator or 2FAS. Other standards-compatible apps may also work.
How do I enable two-factor authentication?
Sign in, open the Chat Buddy two-factor security page, choose to begin setup, add Chat Buddy to your authenticator app and enter the newest six-digit code. Save the recovery codes before finishing.
How long does a trusted device remain trusted?
A device can be trusted for 30 days. Use this only on a personal device that other people cannot access. You can forget all trusted devices from your security settings at any time.
What are recovery codes?
Recovery codes are one-time backup codes. Chat Buddy creates eight when you enable protection. Each code works once and can be used when the authenticator app is unavailable.
What should I do if I lose my phone?
Use an unused recovery code to sign in. Then open your security settings, forget trusted devices if necessary, and replace the old authenticator setup. When you no longer have any working authenticator or recovery code, contact Chat Buddy support for account-recovery assistance. Ownership checks may be required.
Can I create a new set of recovery codes?
Yes. From the protected account screen, choose to create new recovery codes and enter your current six-digit authenticator code. The previous set stops working when the replacement set is created.
Can I turn off two-factor authentication?
Members whose account role does not require 2FA can turn it off after confirming their current password and an authenticator or recovery code. Some account roles may be required to keep two-factor protection enabled.
Why did my six-digit code not match?
Authenticator codes change regularly. Enter the newest code shown for Chat Buddy and make sure your phone’s date and time are set automatically. A code close to expiring may change before it reaches the server, so try the next fresh code.
Will Chat Buddy staff ask for my password or security code?
You should never send your password, six-digit authenticator code, recovery code, QR code or setup key to another user or someone claiming to provide support in chat.
Does two-factor authentication prevent every account threat?
No security measure can remove every risk. Two-factor authentication greatly reduces the value of a stolen password, but you should still use a unique password, protect your email account, avoid suspicious links and keep your devices secure.
Can guest users enable two-factor authentication?
Two-factor authentication protects registered Chat Buddy accounts. Guests do not have the same persistent registered-account login to protect.
Add stronger protection to your account
Open the Chat Buddy security setup, add the account to your authenticator app and save your one-time recovery codes somewhere safe.
Security options may vary according to account status, site role and administrator settings. Two-factor authentication protects registered-account login but does not replace safe password, device and privacy habits.