Two-factor Authentication on Envato

Two-factor authentication (2FA) adds an extra layer of security to your Envato account. When 2FA is enabled, you must enter your username and password plus a time-based authentication code from a mobile app each time you log in to any Envato product.

You can enable or disable two-factor authentication at any time from your Envato account settings.

How to enable two-factor authentication on Envato

1. Click your name in the bottom-left corner of the Envato app and select My account.
2. Go to the Account settings section and click Two-factor authentication (2FA).
3. Select Enable.
4. Download an authenticator app to your mobile device — for example, Google Authenticator or Authy.
5. Once installed, open the app and scan the QR code displayed on screen to activate two-factor authentication.
6. You will see an on-screen confirmation message and a list of backup codes. You will also receive an email confirming the change.

Two-factor authentication is now active. Each time you log in, you will be required to enter an authentication code from your authenticator app.

How to disable two-factor authentication on Envato

1. Click your name in the bottom-left corner of the Envato app and select My account.
2. Go to the Account settings section and click Two-factor authentication (2FA).
3. Select Disable.
4. Enter your Envato account password to confirm.
5. Click Disable Two-Factor Authentication to complete the process.

You will receive an email confirming the change.

Forgot your password and need to disable 2FA?

If you want to disable two-factor authentication but have forgotten your password:

1. Reset your password at account.envato.com/reset_password — Envato will email you a reset link.
2. Once you have reset your password, log in to your account and enter your authentication code when prompted.
3. Follow the disable steps above to turn off two-factor authentication.

I'm locked out — what should I do?

I lost my device but have my backup codes

Use one of your backup codes to log in. Once you are in your account:

1. Go to Envato account settings.
2. Click Two-factor authentication (2FA).
3. Disable 2FA, then re-enable it and scan the QR code with the authenticator app on your new device.

I lost my device and don't have my backup codes

If you cannot access your authenticator app and do not have your backup codes, please contact the Envato support team for assistance with account recovery.

My 2FA codes are not working at login

Authentication codes are time-based and only valid for a short period. If your codes are being rejected, the most likely cause is an incorrect time setting on your mobile device.

To fix this:

1. On your mobile device, go to Date and Time settings.
2. Turn off automatic time and timezone, then turn it back on again. This forces your device to re-sync to the correct time.
3. Open your authenticator app and try logging in again.

You can also verify your device's current time against an accurate time source by searching "current time" online.

Backup codes: what they are and how to use them

Backup codes are one-time-use codes generated when you first set up two-factor authentication. Each code can only be used once and cannot be reused.

Treat backup codes like passwords — store them securely in a password manager or another safe location.

To generate new backup codes:

1. Go to Envato account settings.
2. Click Two-factor authentication (2FA).
3. Click Show backup codes to view your current codes, or generate a new set.

Frequently asked questions

• What authenticator apps does Envato support?

  Any time-based one-time password (TOTP) authenticator app is compatible with Envato's two-factor authentication. Commonly used apps include Google Authenticator and Authy. Both are available free on iOS and Android.

• Can I use two-factor authentication if I sign in with Google or Facebook?

  No. Two-factor authentication via Envato is only available for accounts that sign in with an Envato username and password. If you use a social login (Google, Facebook, or another provider), manage your security settings directly through that provider.

• Can I disable two-factor authentication after enabling it?

  Yes. You can enable or disable two-factor authentication at any time from your Envato account settings. You will need your Envato password to disable it.

• What happens if I get a new phone?

  If you get a new phone, disable two-factor authentication on your current account, then re-enable it and scan the QR code with the authenticator app on your new device. If you no longer have access to your old device, use a backup code to log in first, then follow the same process.

• I've lost my backup codes — can I get new ones?

  Yes. You can generate a new set of backup codes at any time from Account settings → Two-factor authentication (2FA) → Show backup codes. Generating a new set will invalidate all previous backup codes.