Account Safety

How do you handle two-factor codes?

Updated 11 Sep 20262 min read

Leave two-factor on. We do not ask anyone to disable it, and a service that told you to would be asking you to make your account easier to steal.

When a code is needed

Only for services that sign in to your account — piloted boosting, account mods and top-ups placed straight onto your balance, all of which say so on their page before you buy. Bot lobbies, self-play runs, in-game handovers, redeem codes and account purchases never reach your login screen, so no code is involved.

How it works

  1. The booster reaches the login step and tells you in your order ticket.
  2. You send the one-time code in that ticket, to the person handling your order.
  3. The code is used once and expires within minutes, so the copy left in the conversation is worthless to anyone.

Rules that keep this safe

  • Never post a code in a public channel. Anyone reading it can use it before the booster does.
  • Only send one when we ask, and only during your run. An unprompted request for a code is not us — see what we ever ask for.
  • Do not remove 2FA to make it easier. It does not speed anything up, and an account without it is materially less safe for the rest of the year.
Some platforms issue backup codes instead of prompting a device each time. If yours does, send a single backup code rather than turning the whole feature off — and regenerate your codes once the order is done.
Was this article helpful?

Related