ChessBit
Accounts

How to Turn On Two-Factor Authentication (2FA)

Protect your ChessBit account with an authenticator app: set up 2FA, save your recovery codes, use one at sign-in if you lose your phone, and turn 2FA off.

Updated 2026-10-183 min readChessBit Support

Two-factor authentication (2FA) means signing in needs your email login code and a 6-digit code from an app on your phone. Someone who gets into your email still can't get into your ChessBit account or near your balance. If you hold money on ChessBit, turn it on.

You'll need an authenticator app such as Google Authenticator, Authy or 1Password.

Turn On 2FA

  1. Open the profile menu (your avatar, top right) → Settings. Two-Factor Authentication is the first card; its status reads Disabled.
  2. Press Enable 2FA.
  3. Scan the QR code with your authenticator app. If you can't scan it, use Or manually enter this key and type the key into the app.
  4. Enter the 6-digit code the app shows to confirm.
  5. ChessBit shows 10 single-use recovery codes. Press Copy or Download .txt, store them somewhere safe and offline, tick "I have saved these codes somewhere I can find them later.", and finish.

The card now shows Enabled.

Recovery codes are shown once. You can't view them again later, so save them before you close the window.

Signing In With 2FA

After your email login code, ChessBit asks for the 6-digit code from your authenticator app (Verify · Authenticator). Codes change every 30 seconds, and each one works once.

After 5 wrong codes in a row (authenticator or recovery codes, they share one count), 2FA sign-in is locked for 15 minutes. The 2FA step also times out after 5 minutes, so if it does, start the sign-in again.

Lost Your Phone?

Use a recovery code. You don't need to be signed in anywhere:

  1. At the 2FA step, press Lost your phone? Use a recovery code.
  2. Type one of the codes you saved, in the form XXXX-XXXX-XXXX. Capital letters, dashes and spaces don't matter.
  3. Press Verify recovery code.

This works after an email login code and after a wallet sign-in. Each recovery code works once. 2FA stays switched on, and your other codes keep working. ChessBit tells you how many are left, shows you a notification, and emails you a security alert saying a recovery code was used. If that wasn't you, contact support@chessbit.io straight away.

There's no way to view or regenerate the codes. To get a fresh set, go to Settings, turn 2FA off and turn it on again, and save the new codes. Do it before you run out.

Lost your phone and your recovery codes? Email support@chessbit.io from your account's email address and tell us what happened. We'll need to be sure it's you before we change anything on the account, so this can take a little time.

Turn Off 2FA

Settings → Disable 2FA, then enter a current 6-digit code or one of your recovery codes. Turning 2FA off also deletes your remaining recovery codes.

More Ways to Stay Safe

  • ChessBit staff will never ask for your login code, 2FA codes or withdrawal code: not in DMs, not on Discord, not by email.
  • Login codes go to your email, so protect that inbox with a strong password and its own 2FA.
  • We alert you about new-device and new-country logins. If one wasn't you, secure your email, turn on 2FA here, and contact support@chessbit.io.
  • Withdrawals always need a separate code sent to your email. See How to withdraw.
Did this solve it?Your answer tells us which articles to rewrite first.

Next in Accounts & Security

AccountsHow to Create a ChessBit AccountTwo ways to sign up for ChessBit: an emailed login code or a crypto wallet. What you'll be asked, and what to do after you register.AccountsHow to Change Your UsernameChange your ChessBit username from account settings — once every 14 days, 6–16 characters.AccountsAccount Verification (KYC)Why ChessBit verifies players, when each level is required, and how the process works.