Two-factor authentication (2FA) helps keep your OfferUp account safe by making sure you're the only person who can access it. 2FA protects your account, your identity, and your personal information.
How it works
When we detect unusual activity on your account, 2FA requires two pieces of information before you can gain access:
- Your account password (or login credentials)
- A 6-digit verification code that we send you
OfferUp sends verification codes by text or email, depending on the contact information on your account. Depending on the level of risk detected to your account or the community, you might also be asked to complete a verification challenge or provide more information. Your account activity may be suspended until you pass the challenge or provide what's requested.
Enrollment and verification
You're automatically enrolled in 2FA when you set up your OfferUp account. Since this is a required security feature, you can't opt out — you may be asked for a 2FA code at any time to keep your account protected.
For example, if you log in from an unrecognized device, we'll ask you to verify it's really you with a code sent by text or email, and in some cases an additional verification challenge. For your protection, never share verification codes with anyone else.
Troubleshooting
Start by checking whether you currently have access to the phone number or email address on your account — that determines which steps below apply to you.
Do you have access to your phone or email on file?
If no — you've lost your phone, gotten a new number, or can no longer access the email on your account — none of the troubleshooting steps below will help, since you can't retrieve a code through either channel. Please contact us for assistance recovering access to your account.
If yes, continue to the troubleshooting steps below.
If you have access to your phone or email but aren't getting your 2FA code, try these tips in order:
- Make sure OfferUp can send you notifications. See Managing your notification preferences.
- Update to the latest version of the mobile app. See Update your app version.
- Check your email spam or junk folder for the code.
You should receive your code within a few minutes of trying these steps.
Still not receiving codes after trying all three? Contact us for assistance — this may mean there's an issue with your account's delivery settings on our end.
If you receive a verification code you didn’t ask for, it could mean:
- Someone accidentally entered your phone number or email when trying to sign in.
- Your account password may have been compromised.
Don’t worry—2FA is working as intended. Even if someone has your password, they can’t access your account without the code. What to do next:
- Do not enter the code anywhere unless you requested it.
- Do not share the code with anyone.
- Change your password immediately to keep your account secure.
- If you keep receiving unexpected codes, contact us for assistance.