What is 2-step sign-in?
Your password is the first step. With 2-step sign-in on, logging in also asks for a 6-digit code from an app on your phone. The code changes every 30 seconds. So even if someone finds out your password, they still cannot get into your penguin without your phone.
It is free and you choose whether to use it. It is off until you turn it on.
Turn it on
Get an authenticator app
Put a free authenticator app on your phone, like Google Authenticator, Microsoft Authenticator or 2FAS. If you are young, ask a grown-up to help.
Open My Account
Log in to My Account and find 2-step sign-in. Type your password and press Turn On 2-Step Sign-In.
Scan the code
In the app, add a new account and scan the square code with your phone's camera. If it will not scan, type the key shown under it instead.
Type the code from the app
The app now shows a 6-digit code for your penguin. Type it in and press Check Code.
Save your recovery codes
You get ten recovery codes. Write them down or download them and keep them somewhere safe. Each one lets you log in once if you lose your phone.
Logging in
-
In the game
Type your penguin name and password as usual. A box asks for your code: open the app, type the 6 numbers and press Okay.
-
On the website
After your password, type the code from the app. Leave Trust this device ticked on your own computer so it does not ask again.
-
No phone with you?
Type one of your recovery codes where the code goes. If your penguin has a confirmed email, you can also choose Email me a code instead.
-
Trusted devices
A device where you passed 2-step sign-in is trusted: it will not ask for a code there again, in the game or on the website. It asks again if you sign it out in My Account, after you change your password or email, or if something looks wrong. Untick Trust this device on a shared computer.
-
Passkeys
In My Account you can add a passkey. Then you can log in with your device's fingerprint, face or PIN instead of your password and a code: press Sign in with a passkey on the website or in the game.
Questions
The code does not work.
Make sure the time on your phone is set automatically, then try the newest code. Each code works only once. After too many wrong codes you have to wait a while before trying again.
I lost my phone.
Use one of your recovery codes to log in. Then go to My Account, turn 2-step sign-in off and on again with your new phone, and save the new recovery codes.
I lost my phone AND my recovery codes.
Create a ticket from the Help & Support page. Our team will ask you some questions to check the penguin is really yours before they can turn 2-step sign-in off. This can take a little while, so keep your recovery codes safe.
How do I turn it off?
In My Account, open Turn off 2-step sign-in and type your password and a code from the app.
Will staff ever ask for my code?
No. Never tell anyone your password, your codes or your recovery codes. Not a friend, and not someone who says they are staff.