Set up two-step verification

Two-step verification adds a second step to every sign-in. After your password, or your Google, Facebook, or Twitch sign-in, WeTip asks for a 6-digit code from an authenticator app on your phone. Someone who learns your password still cannot get in without your phone.

Before you start

• Install an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Authy, or 1Password.
• Verify your email address. WeTip sends a security email every time two-step verification changes, so it needs an address it can reach. See Verify your email.
• Sign in recently. For your security, setup needs a fresh sign-in. If WeTip asks you to Sign in again, do that and you come straight back to setup.

Turn it on

1. Open Account → Security and select Set up two-step verification.
2. Select I have an app, continue.
3. In your authenticator app, add a new account and scan the QR code. If you cannot scan it, select Can’t scan it? and enter the key instead. Choose a time-based key if the app asks.
4. Enter the 6-digit code your app shows and select Turn on two-step verification.
5. Select Download .txt to save your recovery codes, confirm you have saved them, and select Finish.

The setup screen expires after 10 minutes. If it does, select Start again to get a new QR code.

When two-step verification turns on, WeTip signs out every other device. You need a code the next time you sign in on each of them.

Keep your recovery codes safe

You get 10 recovery codes. Each one lets you sign in once without your phone.

• The codes are only available as a file. They are not shown on screen, and the file cannot be downloaded again after you leave the page.
• Keep the file in a password manager or somewhere only you can reach. Do not share it with anyone, including WeTip support.
• Account → Security shows how many codes you have left. When fewer than 3 remain, select Create new recovery codes. Your old codes stop working as soon as the new ones are created.

Sign in with two-step verification

1. Sign in with your password, or with Google, Facebook, or Twitch, as usual.
2. On Enter your code, open your authenticator app and enter the current 6-digit code for your WeTip account.
3. Select Verify, or wait. The code is checked as soon as the sixth digit is entered.

Each code works once and changes every 30 seconds. The code screen expires after 5 minutes. If it does, select Sign in again.

The screen shows part of the email address you are signing in to. If it is not your account, select Sign in with another account.

When WeTip asks for a code again

Some actions ask for a fresh code even when you are already signed in. You see Confirm it’s you. Enter the current code from your app and your action continues. These actions include:

• changing your creator or affiliate payout account;
• requesting a creator data export;
• closing your creator workspace; and
• creating new recovery codes.

Lost your phone

If you still have your recovery codes:

1. Sign in as usual, then select Use a recovery code instead on the code screen.
2. Enter one of your recovery codes and select Verify. WeTip takes you to Account → Security and shows how many codes are left.
3. In Two-step verification, select Turn off, then Lost your phone? Use a recovery code.
4. Enter a different, unused recovery code and select Turn off.
5. Select Set up two-step verification and follow the steps in Turn it on above with your new phone. You get a fresh set of 10 recovery codes.

Every time a recovery code is used, WeTip emails you. If you did not use one, change your password and contact support right away.

If you have lost your phone and your recovery codes, contact support from the email address on your account. Support must confirm your identity before removing two-step verification, and this can take longer than a normal request. When it is removed, every session on your account ends and you receive an email.

Codes that do not work

• That code didn’t work. Enter the newest code from your app, not one that is about to change. Make sure your phone sets its date and time automatically. A phone clock that is off by more than a minute produces wrong codes.
• Attempts remaining. You can try 5 times on one sign-in. After the fifth wrong code, sign in again from the start.
• Too many wrong codes. After 10 wrong codes in 15 minutes, WeTip pauses code checks on your account for 15 minutes and emails you. Wait, then try again.
• Wrong WeTip entry in your app. If you set up two-step verification more than once, delete the old WeTip entries from your authenticator app and keep the newest one.

Turn it off

1. Open Account → Security.
2. In Two-step verification, select Turn off.
3. Enter a current code from your authenticator app and select Turn off. If you no longer have your phone, select Lost your phone? Use a recovery code and enter one of your recovery codes instead.

WeTip emails you when two-step verification is turned off. Your account is then protected only by your password or social sign-in.

Accounts that require it

Two-step verification is optional for supporters. Administrator accounts must use it, and it will also be required for creator accounts. Creators see a notice in their workspace before it becomes required. If your account requires it, Turn off is not available and WeTip sends you to setup before you can continue. If you lose your phone on an account that requires two-step verification, contact support.

Related articles

• Secure your account
• Fix sign-in problems and reset your password
• Verify your email