How do I use a confirmation code for two-factor authentication in Pushwoosh?

Pushwoosh two-factor authentication (2FA) supports two methods, and you can enable both so one is a backup for the other:

Email verification code

1. Receive the code. When you (or someone else) attempt to log in, Pushwoosh emails a verification code to your registered address.
2. Locate the code. It is a short numeric code, for example 478245.
3. Use the code. Enter it on the Pushwoosh login page when prompted. You can also use the direct link included in the email to complete authentication.

Authentication app code (TOTP)

If you set up an authentication app such as Google Authenticator, open the app at login and enter the code it shows. These codes are generated offline (TOTP, RFC 6238), so they work even when email delivery is delayed.

Where to enable or change 2FA

Go to My Account → Account settings and click Get started in the Two-Factor Authentication section, then choose Email verification and/or Authentication app. Invited users and sub-users configure 2FA on their own accounts the same way. To turn 2FA off, click Deactivate and confirm with the code sent to your email.

Pushwoosh also supports passkeys as a login method — see the Passkeys guide in the documentation.

If the code never arrives

Check your spam/junk folder, confirm the mailbox is active and accepting mail, then request the code again. If you have the authentication app enabled, use it instead.

Security note

If you did not initiate the login request, do not use the code. Change your password and review your account settings and active sessions.