Two-factor authentication is a security feature that helps protect your Discogs account by requiring your to confirm your login attempts each time you try to access Discogs from a browser or mobile device we don't recognize. You will also receive alerts informing about your account access.
- How Do I Turn On The Two-Factor Authentication?
- How Can I Log In And Retrieve My Token?
- How Can I Remove Two-Factor Authentication From My Discogs Account?
Turning on two-factor authentication is easy. There are two ways to enable it:
Navigate to your Discogs sessions page and log in to your Account Dashboards:
When you click Log in, you will have access to the security management options and the Setup button for Two-factor authentication:
You will be prompted to use the Authenticator App on your phone to scan the QR code currently showing on the app.
Note: If you don’t have an Authentication App on your phone, visit your Play Store (if you use an Android device) or App Store (from an Apple device) to download an Authentication App.
Once you enter the token from your authentication app, you’ll be all set! The system will show a new page with a list of recovery codes. We strongly advise you that you securely store these codes as a backup so you can still login to your account in the event that you lose access to your device.
That’s it! Two-factor authentication is now set up on your Discogs account and will serve as another layer of protection in addition to a strong password.
Note: We recommend making a backup of the codes. This will allow you to recover your accounts in case you will change your phone or the Authentication app needs to be downloaded again.
You can access the two-factor authentication menu directly from your User settings. Click on your avatar in the right top corner and select Settings:
Once you are in your User settings, you need to scroll down to the Two-Factor Authentication section. Here you can:
- See the current status of the two-factor authentication option
- Manage the two-factor authentication
- Capturing Recovery Codes when 2FA is enabled
To enable the two-factor authentication, please click on Manage 2FA status & Authorized Applications and follow as mentioned for Option 1.
When you set up two-factor authentication, you will be asked to enter a login code (token) after you enter your email and password:
This code is generated automatically from your Authenticator App. You will need to follow the steps in the Authenticator App to add the Discogs credentials for the first time. When it’s done, you will just need to open the Authenticator App and use the code suggested.
Here below is an example of how an Authenticator App works (Google Authenticator). When you open the app, you will have the list of tokens you can use for different web-sites, including Discogs (identified as “account.discogs.com”). You need to put this code in the token field. For more information about how to set up the codes in the app, please visit your Authenticator App support page.
When you log into your account, you will also have access to regenerate your code:
This will allow you to regenerate codes in case you need a new one. Remember to make a backup and safely store them.
If you decide to stop using two-factor authentication or are having issues logging in to your account, you can remove it by directly accessing your Account Dashboard. That said, we strongly discourage removing the two-factor authentication from your account, as it is an important security requirement that helps protect your account.
Once you are logged to your Account Dashboard, you can click on the “X” next to Authenticator App:
A green banner will confirm that the two-factor authentication has been removed from your account:
Alternatively, you can contact our support team for help removing two-factor authentication. Please provide us with the following information in your message so we can assist you:
- Your username
- Email address
- Shipping address
- Phone number, if applicable
- The amount and contents of a recent sale or purchase
- If your Collection or Wantlist is private, you may also provide 2 - 3 releases along with approximate dates added or custom notes
- Any other information you may feel is relevant to verifying your identity