If you shop, sell, or manage subscriptions on Amazon, adding an authenticator app is one of the fastest ways to protect your account.
This guide explains how to set up an authenticator app for Amazon, what to expect during enrollment, and how to avoid common setup mistakes.
What an authenticator app does for Amazon security
An authenticator app generates time-based one-time passwords, often called TOTP codes, that refresh every 30 seconds.
Instead of relying only on a password, Amazon can ask for a code from your phone during sign-in, which helps block unauthorized access even if your password is exposed.
Common authenticator apps include Google Authenticator, Microsoft Authenticator, Authy, and 1Password.
Amazon’s two-step verification works with standard TOTP apps, so you do not need a special Amazon-only app.
Before you begin
Set up your authenticator app on a device you can keep secure and access reliably.
Before starting, make sure you have the following:
- Your Amazon account username and password
- A smartphone or tablet with an authenticator app installed
- Access to the email address or phone number linked to Amazon
- Enough battery life and a stable internet connection
It also helps to review whether you already use two-step verification on Amazon.
If you do, you may need to replace an existing method or add a new one depending on your account settings and region.
How to set up an authenticator app for Amazon
Amazon’s exact screens can vary slightly by region and by whether you are using a desktop browser or the mobile app, but the process follows the same general pattern.
Start by signing in to your Amazon account and opening the security settings.
- Sign in to your Amazon account.
- Go to Login & security or Security settings.
- Find Two-Step Verification, Two-Factor Authentication, or a similar option.
- Choose the option to add an authenticator app.
- Amazon will display a QR code or setup key.
- Open your authenticator app and add a new account by scanning the QR code or entering the key manually.
- Enter the six-digit code generated by the app back into Amazon to confirm setup.
- Save any backup codes or recovery options Amazon provides.
Once verification succeeds, your Amazon account will require both your password and a fresh code from the authenticator app when you sign in from a new device or browser.
Using a QR code versus manual setup key
Most users will scan a QR code because it is faster and reduces typing errors.
If your camera is unavailable or the code will not scan, Amazon usually provides a manual setup key that you can enter into the authenticator app.
Manual entry is useful when:
- Your phone camera cannot read the QR code
- You are setting up a new device without a camera
- You need to move the authenticator to another app or device
When entering the key manually, copy it carefully.
A single wrong character can cause the app to generate codes that Amazon will reject.
Which authenticator app works best with Amazon?
Amazon works with standard TOTP-based apps, so your choice mostly depends on convenience and recovery options.
Google Authenticator is simple and widely used.
Microsoft Authenticator adds cloud backup in many environments.
Authy is popular for multi-device sync, though backup habits matter.
1Password can also store and generate codes if you already use it for password management.
Choose an app that supports secure backup if you may lose your phone.
If you prefer minimal setup and do not need cross-device sync, a basic authenticator app is enough.
How to sign in after setup
After enabling two-step verification, Amazon sign-in changes slightly.
You enter your password first, then the app-generated code when prompted.
The code is time-sensitive, so use the most recent one shown in your authenticator app.
If you trust a personal device, Amazon may offer a “remember this device” option.
Use this only on devices you control, such as your own laptop or phone.
Avoid saving sign-in trust on shared computers, public kiosks, or workstations you do not manage.
Common problems and how to fix them
Even a straightforward setup can fail if time, device sync, or account settings are off.
The issues below are the most common.
The code is invalid?
If Amazon rejects the code, check the device time on your phone.
Authenticator apps depend on accurate clock synchronization.
Turn on automatic date and time settings, then try again with the newest code.
The QR code will not scan?
Increase screen brightness, zoom in slightly if needed, and hold the phone steady.
If the scan still fails, use the manual setup key instead.
You changed phones?
If you still have the old device, transfer the authenticator account before wiping it.
If you no longer have access, use Amazon’s account recovery flow and any backup codes you saved during setup.
You are locked out of your account?
Recovery may require email confirmation, SMS verification, or identity checks.
This is why backup codes are important.
Store them in a secure password manager or offline safe place, not in an unprotected notes app.
Best practices for securing your Amazon account
Adding an authenticator app is a strong upgrade, but it works best when paired with other security habits.
Consider the following:
- Use a unique, strong password for Amazon
- Enable two-step verification on your email account as well
- Review recent sign-in activity and security alerts
- Keep your phone’s operating system updated
- Lock your device with a passcode, fingerprint, or face authentication
- Store backup codes in a secure location
Phishing remains a major threat.
Amazon will not ask you to read a code aloud over the phone or send it by email.
If a message claims your account is at risk, verify it by signing in through the official Amazon website or app instead of clicking suspicious links.
When to update or replace your authenticator app
You may need to update your setup if you switch phones, reset your device, or change to a different authenticator app.
Before removing the old app, confirm that the new one is working and that Amazon accepts its codes.
This avoids accidental lockouts.
If your authenticator app supports cloud backup or encrypted export, review those settings before migration.
If it does not, move the account manually while the original device is still available.
Why this setup matters for Amazon accounts
Amazon accounts can store payment methods, shipping addresses, digital purchases, Prime access, and business-related order history.
Because of that, a compromised account can expose sensitive personal and financial data.
An authenticator app adds a strong second layer of protection without making routine sign-ins overly complicated.
For most users, the setup takes only a few minutes and materially improves account safety.
Once enabled, the app becomes a simple habit: open it, read the current code, and finish sign-in.