What is 2FA?
2FA (two-factor authentication) uses an external device — like a mobile phone — to generate a code you enter each time you log in. Even if your password is compromised, an unauthorized party would also need access to your secondary device to get in. We strongly recommend enabling it.
How do I set up 2FA?
You'll need an authenticator app on your mobile device. The most common are Google Authenticator and Authy, though others are available on app stores.
Go to bubble.io/account and scroll to the Security section.
Click "Set up 2FA."
In the popup, enter your current password and click "Generate QR code."
Scan the QR code with your authenticator app, enter the generated code into the popup, and click "Activate 2FA."
The page will confirm: "You have successfully set up two-factor authentication."
How do I generate backup codes?
We recommend generating backup codes in case you ever lose access to your mobile device.
On your Account page, scroll to the Security section and click "Generate codes."
Enter your password and a code from your authenticator app, then click "Generate codes."
Copy the backup codes and save them somewhere safe, then click "Close popup."
Store backup codes offline (in an encrypted storage, a trusted password manager, or a physical printout in a safe place). Don't share them with anyone, and regenerate them if you suspect exposure.
How do I disable or re-enable 2FA?
To disable 2FA, go to your Account page and select "Disable 2FA." Note that we recommend keeping 2FA active for security purposes.
To re-enable 2FA after it has been disabled, follow the same setup steps above: go to Account Settings → Security Tab → "Set up 2FA" and complete the QR code flow.
What if I'm locked out or having trouble with 2FA?
Not receiving a 2FA token: This may be a configuration issue. Ensure you have access to your associated email account for identity verification.
2FA not working despite proper setup: Contact Bubble Support — we can help disable 2FA after verifying your identity.
Locked out of your account: Bubble Support can assist in disabling 2FA once your identity is verified.
Authenticator app linked to the wrong device: Contact Support to reset 2FA.
MFA codes lost: Contact Support to temporarily disable MFA. You'll need to verify your identity.
Identity verification
To reset or disable 2FA through Support, you'll need to verify your identity. Contact us via the email associated with your account, or use the AI chatbot and follow the prompts. You may be asked to provide one of the following:
A photo of yourself holding your ID with visible details
The last four digits of the credit card linked to your Bubble account
Information about the paid plan of any app on the account (e.g., Starter or Growth)