Protect your account with two-factor authentication

false

Protect your account with two-factor authentication

Last updated September 29, 2026 17:30

Secure your Squarespace account through log in with two-factor authentication methods like passkeys, apps, or text messages.

Two-factor authentication (2FA) adds an extra layer of security to your account by using a log-in method that only you can access. You can set up a passkey, an authentication app, or a text message, as your preferred 2FA method. After setting up your 2FA method, you'll be prompted to reauthenticate whenever you take sensitive actions on your account like changing your password or login credentials, or changing 2FA methods.

Tip It’s best to enable only one of these methods, as enabling multiple methods won’t make your account more secure.

Watch a video

Authentication for multiple contributors

If any of your sites have multiple contributors, your contributors can choose to enable 2FA for their own accounts. There isn't a way to enable it for them.

Use a passkey as a 2FA method

Passkeys are “passwordless logins” that use a device to authenticate your login. This can be your phone or laptop's biometric scanners like TouchID or FaceID, or a separate hardware security key like a Yubikey or USB. You can add up to five passkeys to your account. To set up a passkey:

1. Open your Two-factor authentication panel.
2. Next to Passkey, click Set up and follow the prompts to login.
3. Enter a passkey name in the text field, then click Next. Passkey names have a 20-character limit.
4. Depending on your browser, you’ll be prompted to select a passkey option. Select a passkey and follow the prompts to complete the setup process.
5. You’ll receive backup login codes, which you can use if you can’t log in using your passkey.

After setup, you can log into your account using your passkey. To log in:

1. Click Use a Passkey, then select the passkey you'd like to use to login.
2. Follow the prompts in your browser and on your mobile device (if applicable) to complete the login process.
3. To skip two-factor authentication the next time you log in, select Remember this computer for 30 days.

Use an authentication app as a 2FA method

An authentication app generates a code to use to complete the login process. We recommend Google Authenticator, but you can use any authentication app available for Android and iOS devices.

To setup an authentication app as your 2FA method:

1. Download an authentication app.
2. Open your Two-factor authentication panel.
3. Next to Authentication App, click Set Up, then follow the prompts to login.
4. A QR code will appear on the screen. Open the authenticator app and follow the process to add a new code. If you’re using Google Authenticator, tap Add a code, then scan the QR code. If you can’t scan the QR code, click Can't Scan QR Code, and enter the code manually in the app.
5. Click Next.
6. Enter the code that appears in your authentication app, then click Confirm.
7. You’ll get backup login codes displayed on your screen, which you can use if you can’t login using your authentication app.

After setup, you’ll be prompted to enter the code from your authentication app every time you log in. To skip two-factor authentication on your device the next time you log in, select Remember this computer for 30 days.

Use text messages (SMS) as a 2FA method

If you’re in Australia, Canada, Ireland, the UK, or the US, you can have a code sent to you via text, which you can use when logging into your account. SMS terms may apply.

To setup text message as your 2FA method:

1. Open your Two-factor authentication panel.
2. Next to Text message, click Set Up, then follow the prompts to log in.
3. Select your country, and enter your phone number, then click Send Code.
4. You’ll get a text message with a 6-digit code. This code will expire after five minutes. If it expires, or if you didn’t get the code, click Resend Code to get a new code sent to you.
5. Enter that code on the screen, then click Confirm.
6. You’ll get backup login codes displayed on your screen, which you can use if you can’t login using this method.

Note It may take several minutes to receive a code, as delivery timing varies by carrier. If you don’t receive your text message after you’ve enabled 2FA via SMS, it may be because you unsubscribed. To resubscribe, text “Start” to the relevant number or Alpha sender ID for your country:

• US: 54016
• Canada: +12892170914
• UK: +441304600052
• Ireland: Squarespace
• Australia: Squarespace

After setup, every time you log in, you’ll be prompted to enter the code sent to you via text. You can skip two-factor authentication on your device the next time you log in by selecting Remember this computer for 30 days.

What if I have the text message method and another 2FA method enabled?

If you have text message 2FA, and another 2FA method enabled, you won’t receive a text message code immediately. Use the authentication app or passkey method to get your code instead. To get a code sent via text message, click Use a different method and then select Text message.

Can I change the phone number for text message 2FA?

Yes. You can change your phone number for text message authentication without disabling your authentication method. To change your phone number:

1. Open your Two-factor authentication panel.
2. Under Management, click Change Number.
3. Select your country from the dropdown, and enter your new phone number.
4. Click Send code. A six-digit code will be sent to your new phone number through text.
5. Enter this code into the text field, then click Confirm. If you didn't receive the code in 5 minutes, you can click Resend code to send out a new code.

Backup login codes

You can use a backup login code to log in if you lose your phone or you can't use your authentication app or your passkey. They only appear once after setting up a 2FA method. You can save or print your backup codes and store them somewhere secure. To print your codes, click Download codes then print the downloaded .txt file.

If you fully disable 2FA, and then turn it on again at a later time, you’ll receive new backup codes. New backup codes invalidate any old backup codes.

Using a backup code to log in

Backup codes are generated in sets of eight, and each code can only be used once. To access your account using backup codes:

1. Go to squarespace.com/login.
2. Enter your account email and password and click Log In.
3. Click Use a different method.
4. Click Backup code.
5. Enter an unused backup code in the authentication code field and click Log in.

Generate new backup codes

If you've used all your backup codes, or lost them and need to generate new backup codes:

1. Open your Two-factor authentication panel.
2. Next to Backup codes, click Generate new codes. This invalidates previous codes.

My backup codes don’t work

If a backup code doesn't work, follow these troubleshooting steps:

1. Type the code in, rather than copying and pasting it.
2. Try a different code from the backup code list. Each code is single-use.
3. If these steps don't work, or if you don't have your backup codes, contact us.

Generate an app password

When you use an app password, you can log in apps or devices that don't support two-factor authentication, such as our Developer Platform. To generate an app password:

1. Open the Security panel in your account dashboard.
2. Click App Passwords, then click Generate Password.
3. Give the password a label, then click Next.
4. Add your account password and click Next.
5. Copy the app password and click Done.

Use this app password to log into the app or device. While 2FA is enabled for your account, you can repeat these steps to generate a new app password any time you need to log into that app or device.

Disable two-factor authentication

You can disable two-factor authentication through the Two-factor authentication panel. When you disable 2FA, your backup codes will no longer work. You need to generate new backup login codes when you reactivate 2FA.

Passkeys

To turn off passkey login, delete all passkeys:

1. Open your Two-factor authentication panel.
2. Click Manage passkeys.
3. Next to the passkey you want to delete, click Delete.

Authenticator app and text messages

To disable text message or authenticator app 2FA:

1. Open your Two-factor authentication.
2. Next to the authentication method you've enabled, click Turn off.
3. Log in to your account.
4. Click Turn off.

Troubleshooting

If your phone's camera is broken or unable to scan the QR code, follow the steps for your device:

• Computer

• Squarespace App

• Open Google Authenticator. If this is your first time using the app, click Get started. Otherwise, click +, then select Scan QR-code.

• Scan the QR code.

• Click Can’t scan QR code?, then click Copy.

• Open Google Authenticator and click +, then select Enter a setup key.
• Enter your Squarespace account email.
• Paste the code in the Key field.
• Keep Time based selected, then click Add.

For more troubleshooting tips, visit Troubleshooting two-factor authentication.

Was this article helpful?

Yes No

1179 out of 3803 found this helpful

Yes No

Protect your account with two-factor authentication