How to set up Upwork two-step verification
Go to Account settings on desktop, or Settings in the Upwork mobile app, and open Password and Security. Turn on the toggle next to the method you want, complete a verification if Upwork prompts you, and follow the setup steps for that method. You can add more than one, and Upwork recommends that you do.
Two-step verification (also called two-factor authentication or 2FA) asks you to confirm it is really you after your password. Upwork applies it at login and when you access certain information in your account, such as settings or payments. For a freelancer, that second part is the point: the account that holds your earnings, your reviews and your withdrawal method is exactly what you want behind a second lock.
Everything factual here comes from Upwork's own help center articles on managing two-step verification, managing login options, fixing login issues and resetting a password or security answer, all checked on the day this was written. Upwork edits these pages often, so if your settings screen looks different, trust your account.
The four two-step verification methods on Upwork
Upwork offers four ways to confirm it is you. They are not equally convenient, and one of them comes with a precondition most people only find out about when they try to turn it on.
Upwork's two-step verification options, per its help center
| Method | How it works | What you need |
|---|---|---|
| Mobile app prompt | A prompt appears in the Upwork app; you tap Verify | The Upwork mobile app installed, notifications enabled, and you stay signed in to the app |
| Text message (SMS) | Upwork texts a six-digit code to your phone | A standard mobile or landline number (no VOIP), plus identity verification or a billing method on the account |
| Authenticator app code | An app on your phone generates a passcode every 30 seconds | An authenticator app (most are free) and your phone's clock set to automatic |
| Security question | You answer a question you picked earlier | An answer you will actually remember and nobody else can guess |
Step by step: turning on each method
All four live in the same place: Account settings (desktop) or Settings (mobile app) > Password and Security. Once you have one method set up, Upwork asks you to complete a two-step verification any time you edit, disable or add another method, so set up your backup while you still have easy access to your first one.
- Mobile app prompt: download the Upwork app from Apple or Google Play and enable notifications. Turn on the toggle next to Mobile app prompt, open the prompt in the app when guided, and tap Verify.
- Text message: turn on the toggle next to Text message, enter your country code and phone number, then enter the six-digit code Upwork texts you and choose Verify. If the toggle is not available, verify your identity or add a billing method first.
- Authenticator app code: turn on the toggle next to Authenticator app code, save the secret key to your authenticator app by scanning the QR code or entering it manually, then enter the six-digit code and choose Verify.
- Security question: choose Set up now next to Security question and answer, complete two-step verification if prompted, pick a question from the list and enter your answer.
If the SMS precondition is what is blocking you, the verification process itself is covered in [Upwork identity verification](/blog/upwork-identity-verification). It is worth doing anyway, since Upwork uses your verified identity in other places too, including matching your name to your withdrawal method.
Which methods to pair (my take)
This part is my opinion, not Upwork policy. Upwork's only instruction is to set up more than one method. The question is which combination leaves you able to get in on a bad day: lost phone, new phone, travel, or a SIM that stopped working.
- Primary: the mobile app prompt. It is a tap instead of typing a code, and you will usually have the app open anyway to answer clients.
- Backup: an authenticator app. It does not depend on your mobile carrier or on receiving a text in another country, because Upwork notes the app keeps generating valid codes offline as long as the phone's time is correct.
- Last resort: the security question. Upwork lets you use your security answer as a backup option when other methods fail, which makes it the one to write down somewhere safe.
SMS is fine too, but it is the method most tied to one physical SIM and one phone number. If you switch numbers often or work while traveling, lean on the app prompt and the authenticator instead.
Getting a new phone? Re-pair your authenticator
This is the most common way people lock themselves out. Upwork explains that enabling an authenticator app sets up two things: a specific device (your phone) and the code the app generates on it. When you switch phones, Upwork says you need to do both of these:
- Transfer the authenticator app to your new phone and import your existing accounts into it.
- Disable and re-enable the authenticator app in your Password and Security settings to pair the new phone with your Upwork account.
Do this before you wipe or trade in the old phone. Codes that are rejected even though the app looks right are usually a clock problem: Upwork's fix is to switch your phone's date and time setting from Manual to Automatic (Settings > General > Date & Time on iPhone; on Android it varies by manufacturer, typically under General Management > Date and Time). Changing time zones while traveling can trigger the same issue.
Locked out? What to do if you cannot access your verification method
If you set up several methods, Upwork lets you choose any of them when challenged, and your security answer works as a backup. That is why the pairing advice above matters.
If none of your methods work, Upwork's current guidance is to reset your account's security information by completing its recovery form. If it is the security answer you have forgotten, choose Forgot your answer? on the security question form and Upwork will email you next steps; it may also prompt you to submit a verification form for manual recovery. Forgot your password instead? Use Forgot password? on the login page, and expect that Upwork may ask you to pass two-step verification before the reset email arrives.
Whatever happens, do not create a new account to get around a lockout. Upwork states that each person is permitted only one account, and that creating another can lead to suspension of both the old and the new account. The full rules are in [can you have two Upwork accounts](/blog/can-you-have-two-upwork-accounts), and if things have already gone wrong, start with [Upwork account suspended: what to do](/blog/upwork-account-suspended-what-to-do).
Turning off two-step verification (and why you probably should not)
Upwork lets you remove a method at any time: in Password and Security, turn off the toggle next to the method, choose Delete in the pop-up, complete a two-step verification to confirm it is you, then confirm Yes, delete and disable the verification method.
The usual reason people turn it off is that a method has become annoying, typically SMS codes that arrive late. The better fix is to add the app prompt or an authenticator and then remove the method you dislike, rather than leaving the account protected by a password alone. Your account is your income: the reviews, the Job Success Score and the client history that win the next contract all live in it. For how much those signals matter, see [how to improve your Upwork Job Success Score](/blog/how-to-improve-upwork-job-success-score).
Short, practical drops on proposals, niches, client scripts, and rates. No spam, unsubscribe anytime.
Frequently asked questions
How do I turn on two-step verification on Upwork?
Go to Account settings (desktop) or Settings (mobile app) > Password and Security and turn on the toggle next to Mobile app prompt, Text message or Authenticator app code, then follow the setup steps. You can also set up a security question. Upwork recommends adding more than one method as a backup.
Why can't I turn on text message verification on Upwork?
Upwork requires you to verify your identity or add a billing method before SMS two-step verification is available. The number must also be a standard mobile or landline number; VOIP numbers are not accepted.
What do I do if I lost my phone and cannot verify on Upwork?
If you set up more than one method, choose another one when challenged, or use your security answer as a backup. If you cannot access any method, Upwork's newest guidance is to reset your account's security information through its recovery form.
How do I move my Upwork authenticator to a new phone?
Transfer the authenticator app to the new phone and import your accounts, then disable and re-enable Authenticator app code in Password and Security to pair the new phone with your Upwork account. Do it before you wipe the old phone.
Why are my Upwork authenticator codes not working?
Usually the phone's clock is out of sync. Upwork's fix is to set your phone's date and time to Automatic instead of Manual. Changing time zones can cause the same problem.
Does Face ID count as two-step verification on Upwork?
No. Upwork says face or fingerprint recognition only works for logging in and cannot pass a two-step verification challenge, so you still need a mobile app prompt, text message, authenticator app or security question.
Last reviewed by David Iya on October 26, 2026
