Skip to content

Account protection

Support asked for your authenticator code? Don't send it

Requests for codes can arrive disguised as help with refunds, account locks or troubleshooting. Here is how to respond.

By Authenticator CloudPublished 2 min read
Original editorial illustration: Should you send an authenticator code to customer support?
The short answer

Do not send login codes, recovery codes or setup QRs to someone in a chat. Enter a code yourself in the official flow you initiated. If someone asks you to forward it, stop and check your account for unexpected sign-ins.

In this article
  1. Did you start this sign-in?
  2. Keep setup QR codes and recovery codes to yourself too
  3. Already shared a code? Here is what to do next
  4. Get your own codes; troubleshoot with test accounts

Did you start this sign-in?

A second-step prompt during your own sign-in is different from an unexpected contact asking for the number. A short expiry does not make a request harmless.

Knowing your name, email or order details is not proof of identity. Pause and reach the service through an established official route instead of following the contact's new sign-in link.

Keep setup QR codes and recovery codes to yourself too

Setup material can enable another generator, while recovery codes can provide fallback verification. Neither belongs in an ordinary diagnostic attachment.

Start support with versions, timing, actions and redacted errors. Before sharing a screenshot, remove account information, codes and enrollment material, not only the password field.

Already shared a code? Here is what to do next

Stop providing information and use a trusted clean device to inspect the service's sessions, authentication methods and recovery settings. An exposed setup secret calls for service-side re-enrollment, not merely waiting for the number to change.

For work or financial exposure, contact the appropriate official team. Do not grant remote control or provide another number to someone promising to undo the incident.

Get your own codes; troubleshoot with test accounts

Authenticator Cloud keeps codes handy on your phone and in your browser. Open the website yourself, choose the account, and copy or fill the code rather than forwarding it through a chat.

For help, describe the device, version, and steps. Use a public example or a dedicated test account to show the interface, and hide real account details in screenshots.

References

See the official guides above for detailed setup instructions.

Download the app

Apple App StoreiPhone / iPad Open Android APKDirect download · ARM64 only Download