How to Set Up Roblox 2-Step Verification and Save Backup Codes

Check the account’s email prerequisite

Roblox requires a verified email address before 2-Step Verification can be enabled. The extra verification protects password-based login if a password is stolen. Prompt behavior differs between password, email OTP and passkey login, so the absence of a code prompt on a passkey login is not evidence that the security setting has been removed. [1]

Steps

1. Sign in and ensure that the account email is verified before enabling 2SV. [1]
2. In a browser, open Account Settings through the gear at the upper right and select Security. On mobile, use the three-dots icon and gear to reach Account Settings. [1]

Turn on the verification method you will use

Email verification delivers a code to the verified inbox when logging in with a password. An authenticator method requires an app on a mobile device and provides the code there. These are different from the second-device prompt, which asks an already signed-in mobile device to approve a login. [1]

Steps

1. Enable the toggle for the chosen method in Security and complete its on-screen instructions. [1]
2. For an authenticator method, have an authenticator app on your mobile device and use that app’s code when Roblox requests it. [1]

Generate and save the current recovery-code set

Recovery codes are one-time login alternatives. A new set deactivates every previously generated set, so preserve the current codes rather than relying on an older list. They are displayed only when created; returning to settings later will not simply reveal that same set again. [1]

Steps

1. In Account Settings > Security, choose Generate under recovery codes and enter the account password when requested. [1]
2. Save the displayed codes securely while they are visible. Do not share a code with another person. [1]

Keep enough verification options for recovery

The current enhanced recovery policy requires two different verification methods in the account details when the primary 2SV method is lost. Roblox lists a phone number for eligible accounts, passkeys and saved backup codes as backup options. Reviewing these beforehand can prevent being left with no usable challenge option. [1]

Complete a password login and check where the code arrives

After email verification has been enabled, a password login asks for a code from the account’s verified inbox. After authenticator verification has been enabled, the code is found in the authenticator app. Entering the requested code on Roblox completes the login. That is the documented success check; neither a login code nor a backup code needs to be sent to a support volunteer or another player. [1]

Steps

1. Enter the requested verification code on the Roblox login screen to finish the challenged login. [1]