How to Set Up an Authenticator App for PayPal
Setting up an authenticator app for PayPal adds a strong second layer of protection to your account.
This guide shows exactly how the process works, what to expect, and how to avoid common setup problems.
PayPal supports app-based two-factor authentication, which uses time-based one-time passwords instead of SMS codes.
That matters because authenticator apps are generally more resistant to SIM swapping, phone number changes, and text message interception.
What an authenticator app does for PayPal security
An authenticator app generates a new six-digit code every 30 seconds.
When you sign in to PayPal, you enter your password and then the current code from the app.
Common authenticator apps include Google Authenticator, Microsoft Authenticator, Authy, 1Password, and other TOTP-compatible apps.
PayPal uses the standard time-based one-time password method, often abbreviated as TOTP.
- Stronger than SMS: codes are generated locally on your device.
- Works offline: no cellular signal is needed to view codes.
- Better against account takeover: helps block attackers who stole your password.
Before you begin
You need access to your PayPal account and a smartphone or tablet with an authenticator app installed.
It is best to install the app first, sign in with your existing PayPal credentials, and make sure your device time is set automatically.
PayPal may also ask you to confirm your identity through your password, email, or existing security settings during setup.
If you recently changed devices or lost access to your old phone, be ready to verify your account through recovery steps.
How to set up authenticator app for PayPal
Follow these steps in your PayPal account settings to turn on app-based two-step verification.
- Sign in to PayPal. Open the PayPal website or mobile app and log in to your account.
- Go to Security settings. Look for settings related to Security, Login and security, or 2-step verification.
- Choose authenticator app. Select the option to use an authenticator app instead of SMS or text message codes.
- Open your authenticator app. Add a new account by scanning the QR code shown by PayPal, or enter the setup key manually.
- Save the account entry. The app will begin showing rotating six-digit codes for PayPal.
- Enter the code in PayPal. Type the current code from the app into PayPal to confirm the setup.
- Store backup codes if offered. Save any recovery codes in a secure password manager or offline location.
Once setup is complete, PayPal will prompt for an authenticator code during future sign-ins, especially on new devices or when it detects unusual login activity.
Where to find the PayPal security settings?
PayPal regularly updates its interface, so the exact labels may vary by region and device.
In most cases, you can find the setting by opening your account profile and navigating to the security or login section.
If you use the PayPal app, look for account settings, then security preferences.
On the desktop site, security settings are usually under your profile menu or account settings.
If you do not see authenticator options immediately, check for 2-step verification, two-factor authentication, or security key options.
What if PayPal asks for a QR code and a manual key?
Most authenticator apps allow two setup methods.
The fastest is scanning the QR code with your phone camera.
If the camera fails, choose manual entry and type the setup key exactly as shown.
- QR code: easiest and least error-prone.
- Manual key: useful if the QR code will not scan or your device cannot use the camera.
Be careful with spacing and characters when entering the manual key.
A single typo will cause the generated codes to fail.
Common setup issues and fixes
Some users run into problems during setup, but most are easy to resolve.
The code is not working
Check whether the time on your phone is set to automatic.
Authenticator apps rely on accurate device time, and even a small clock mismatch can break code validation.
PayPal says the code is invalid
Wait for a fresh code and enter it before the timer expires.
If the problem continues, remove the PayPal entry from the authenticator app and re-add it using a new QR code or key.
You changed phones
If you used a new phone without transferring your authenticator data, you may need to re-enroll two-step verification.
Keep backup codes or an alternate recovery method available before switching devices.
You cannot log in after setup
Use backup codes if you saved them.
If not, follow PayPal’s account recovery flow and be prepared to confirm your identity through email, phone, or other verification methods.
Best practices for keeping your PayPal account secure
Adding an authenticator app is an important step, but account security works best when combined with other habits.
- Use a unique password: never reuse the same password across other sites.
- Keep recovery options current: update your email address and phone number.
- Save backup codes securely: store them in a password manager or offline safe.
- Avoid phishing links: sign in through the official PayPal app or by typing the URL directly.
- Review login alerts: check for suspicious activity regularly.
If you manage a business account, these precautions are even more important because PayPal often contains payment history, customer records, and withdrawal access tied to your bank or card accounts.
Authenticator app vs SMS for PayPal
SMS codes are easy to use, but they depend on your phone number and mobile carrier.
Authenticator apps remove that dependency and are often the better choice for most users.
| Method | Strength | Reliability | Best use case |
|---|---|---|---|
| Authenticator app | High | High | Personal and business accounts needing stronger protection |
| SMS codes | Moderate | Moderate | Backup option or users without an authenticator app |
For many security-conscious users, the authenticator app is the preferred option because it reduces exposure to phone-number-based attacks.
How to keep access if your phone is lost or replaced
Losing access to your authenticator app does not have to mean losing access to PayPal, but only if you prepare ahead of time.
Backup codes, updated recovery information, and a secondary authentication method can make recovery much easier.
- Save recovery codes immediately after setup.
- Consider using an authenticator app that supports encrypted backup and device sync.
- Keep your PayPal email address active and secure.
- Test login from a second trusted device if you use one.
Organizations and frequent online sellers should also document account recovery responsibilities so the right person can regain access when a device is replaced or staff changes occur.
FAQ about PayPal authenticator app setup
Can I use any authenticator app with PayPal?
Most TOTP-compatible authenticator apps should work with PayPal, including popular options such as Google Authenticator and Microsoft Authenticator.
Do I need a phone number if I use an authenticator app?
PayPal may still keep your phone number for account recovery or verification, but the authenticator app handles the login code itself.
Can I use an authenticator app on more than one device?
That depends on the app.
Some offer cloud sync or multi-device support, while others require manual transfer.
Check the app’s backup and migration features before changing phones.
Is an authenticator app safer than text messages?
In most cases, yes.
App-generated codes are less exposed to SIM swap attacks and carrier-related interception than SMS codes.
What should I do if PayPal does not show the option?
Update the PayPal app, sign in on a desktop browser, or review the account security section again.
Interface labels can vary by region and account type.