How do I use a confirmation code for two-factor authentication in Pushwoosh?

Pushwoosh two-factor authentication (2FA) supports two methods, and you can enable both so one is a backup for the other:

Email verification code

1. Receive the code. When you (or someone else) attempt to log in, Pushwoosh emails a verification code to your registered address.
2. Locate the code. It is a short numeric code, for example 478245.
3. Use the code. Enter it on the Pushwoosh login page when prompted. You can also use the direct link included in the email to complete authentication.

Authentication app code (TOTP)

If you set up an authentication app such as Google Authenticator, open the app at login and enter the code it shows. These codes are generated offline (TOTP, RFC 6238), so they work even when email delivery is delayed.

Where to enable or change 2FA

Go to My Account → Account settings and find the Two-Factor Authentication section. Click Set up next to Email verification and/or Authentication app, then enter the verification code (for the authentication app, scan the QR code first). Email verification is turned on automatically for the account owner when the account is created. Invited users and sub-users configure 2FA on their own accounts the same way. To turn 2FA off, click Deactivate and enter the verification code: the one sent to your email for email verification, or the one shown in your app for the authentication app.

When you enter a code at login, you can enable Trust This Device to skip the code on that device for 30 days. See Set up two-factor authentication for the full steps.

Pushwoosh also supports passkeys as a login method — see the Passkeys guide.

If the code never arrives

Check your spam/junk folder, confirm the mailbox is active and accepting mail, then request the code again. If you have the authentication app enabled, use it instead.

Security note

If you did not initiate the login request, do not use the code. Change your password and review your account settings and active sessions.