How to manage two-step verification on Upwork

Articles in this section

What is two-step verification on Upwork?

Two-step verification provides an extra layer of security at login and when you access certain information in your account, such as settings or payments.

Here’s how it works:

You log in to your Upwork account
You confirm it’s you in one of several ways:
- By entering a six-digit code that is sent to your phone
- By entering a six-digit code that is generated by an authenticator app
- Using your Upwork mobile app to receive a prompt to confirm it’s you
- Answering a security question

How do I set up two-step verification on my Upwork account?

Step 1: Enter your password

Set up a strong password (using uppercase, lowercase, numbers, and symbols)
Don’t share or store your password where someone else could access it
Change your password every 90 days

Step 2: Verify your account

To verify your account, you can choose from using several options:

Confirm it's you through a prompt from the Upwork mobile app
Have a six-digit code sent to your phone
Generate a code with an authenticator app
Answer a security question

Step 3: Add two-step verification

You can add one or more two-step verification methods to help protect your account. We recommend setting up more than one option — that way, you’ll have a backup if you ever lose access to your primary method.

Once a method is added, you’ll need to complete two-step verification any time you edit, disable, or add another method.

To add a security question, just choose one from the list and enter your answer. For other verification types, see the questions below.

How do I use the Upwork mobile app for two-step verification?

First, be sure you’ve already downloaded the Upwork mobile app from Apple or Google Play and enabled notifications on your mobile device. You'll need to stay signed into the Upwork app to receive notifications.

You can enable verification pop-ups in the mobile app by:

Going to Account settings (desktop) or Settings (mobile app) > Password and Security
Turning on the toggle switch next to Mobile app prompt and complete a two-step verification if prompted to do so
Opening the prompt from your mobile app when guided to do so
Tapping on Verify in your mobile app

How do I receive a text message for two-step verification?

Note: To use SMS two-step verification, you will need to verify your identity or add a billing method.

Once you've completed that, you can:

Go to Account settings (desktop) or Settings (mobile app) > Password and Security
Turn on the toggle switch next to Text message and complete a two-step verification if prompted to do so
Enter your country code and phone number. We’ll text you a code. Important: The phone number you provide for verification cannot be a VOIP phone number. You must use a standard landline or mobile phone number for verification.
Enter the six-digit code and choose Verify

How do I use an authenticator app code for two-step verification?

Go to Account settings (desktop) or Settings (mobile app) > Password and Security
Turn the toggle switch on next to Authenticator app code
Save the secret key to the authenticator app by manually entering it or scanning the QR code
Enter the six-digit code and choose Verify

How do I turn off two-step verification on Upwork?

You can remove your two-step security verification at any time.

Go to Account settings (desktop) or Settings (mobile app) > Password and Security
Turn off the toggle switch next to your chosen verification method and complete a two-step verification if prompted to do so
Choose Delete in the pop-up box that appears
Complete a two-step security verification to confirm that it’s really you making the request
Confirm Yes, delete and disable the verification method

I can’t access my two-step verification method. What should I do?

If you enable several two-step verification options, when challenged you will be able to choose any of them. Additionally, you can use your security question answer as a backup option.

If you still cannot access any of your verification methods, the best option is to reset your account's security information by completing this form.

What is an authenticator app?

An authenticator app is an application that is usually installed on a smartphone and generates a six to eight digit passcode every 30 seconds. The passcode can be used for login and other activity where it’s important to confirm that the person initiating the activity is really you.

How do I get an authenticator app?

You can choose from many different (and mostly free) authenticator apps. Google Authenticator is a popular app that is available in both the Apple App and Google Play stores.

What if I get a new phone after I’ve set up my authenticator app?

It’s important to understand that when you enable an authenticator app you are setting up two things:

Using a specific device for account verification (your phone)
Using a code generated by the authenticator app on your device

If you get a new phone, you’ll need to do two things to continue to use your authenticator app.

You’ll need to transfer the app to your new phone. Be sure to import your existing accounts into the app
You’ll need to disable and re-enable your authenticator app in your Password and Security settings to pair your new phone to your account

My timing doesn’t seem to be working. What can I do?

Authenticator apps need the time on your phone to be in-sync with the official time to work. You can disconnect your phone from the internet and as long as its time is still correct, it will successfully generate the codes you need. However, manual time settings and offline devices will not always match up.

If your phone's time is out of sync, or if you have changed time zones, simply change the time settings on your phone from "Manual" to "Automatic."

On iPhone

Go to the Settings app
Select General
Select Date & Time
Enable Set Automatically

On Android*

Go to the Settings app
Select General Management
Select Date and Time
Enable Automatic date and time

*Instructions for Android may vary slightly depending on the manufacturer of the phone.

Can I use a VOIP phone number for two-step verification?

No, a standard landline or mobile phone number needs to be used for verification.