Two-factor authentication (2FA) adds an extra layer of security to your Envato Market account by requiring a unique authentication code, in addition to your password, every time you sign in. You can enable, disable, or manage 2FA at any time from your Envato Account page.
How does 2FA work?
Once enabled, signing in requires three things: your username, your password, and a time-based authentication code generated by an app like Google Authenticator or Authy. These codes refresh automatically and are only valid for a short period.
How do I enable two-factor authentication?
- Sign in to your Envato Market account.
- Go to your Envato Account page.
- Select Two-factor authentication, then Enable.
- Download an authenticator app (e.g., Google Authenticator or Authy) to your mobile device.
- Scan the QR code shown on screen with your app to activate 2FA.
- You'll see an on-screen confirmation along with your backup codes, and receive a confirmation email.
- From now on, you'll enter an authentication code from your app each time you sign in.
Tip: Save or print your backup codes right away — you'll need them if you ever lose access to your authenticator app.
How do I disable two-factor authentication?
- Sign in to your Envato Market account.
- Go to your Envato Account page.
- Select Two-factor authentication, then Disable.
- Enter your Envato password to confirm.
- Select Disable Two Factor Authentication to finish.
- You'll receive a confirmation email.
Forgotten your password? Reset it here first, sign back in with your authentication code, then follow the steps above to disable 2FA.
What are backup codes and how do I use them?
Backup codes are one-time-use codes that let you sign in when you don't have access to your authenticator app. They're generated automatically when you first set up 2FA — treat them like passwords and store them securely, ideally in a password manager.
You can view or generate new backup codes anytime from account.envato.com under Two-Factor Authentication > View backup codes.
What if I lose my device and don't have my backup codes?
If you lose access to your authenticator app, use a backup code to sign in, then disable 2FA and set it up again on your new device.
If you don't have your backup codes either, contact our support team for help regaining access.
Why isn't my 2FA code working?
This is usually caused by your mobile device's clock being out of sync. Since authentication codes are time-based, an incorrect device time will generate invalid codes.
- Check whether your device's time is correct.
- Go to your device's Date and Time settings and re-enable automatic time sync.
- Android: see this time-sync guide.
- iPhone: see this time-sync guide.
- Using Google Authenticator? Open the app, tap the menu (three dots) > Settings > Time Correction for Codes > Sync now.
Does 2FA work if I sign in with a social account?
No — Envato's two-factor authentication isn't available if you sign in using a social account. You'll need to manage your account security directly through your social media provider's own settings.