Does npm work with authenticator apps like MS Authenticator App?

Yes. npm supports TOTP authenticator apps, so you can generate its two-factor codes in MS Authenticator App.

Is npm two-factor authentication free?

Yes. Enabling authenticator-app 2FA on npm is free — you only need the free MS Authenticator App.

What if I lose access to my npm 2FA codes?

Use the backup or recovery codes you saved during setup. If you didn't save them, contact npm support to regain access, then re-add the account to MS Authenticator App.

Should I use an authenticator app or a security key on npm?

npm supports both. An authenticator app like MS Authenticator App is free and works on any phone; a hardware security key adds phishing resistance. You can enable both.

How to enable 2FA on npm

← npm overview Supported

Enable two-factor authentication on npm to stop unauthorized logins. After setup, npm asks for a rotating code from MS Authenticator App in addition to your password.

Step-by-step setup

1
Sign in to npm and open your npm account security settings.
2
Turn on two-factor authentication and choose the authenticator-app option.
Look for "Authenticator app", "Authentication app", or "TOTP" rather than SMS.
3
Scan the QR code with MS Authenticator App.
Open MS Authenticator App, tap add, and point your camera at the QR code npm displays. Can't scan? Enter the setup key manually instead.
4
Enter the 6-digit code to confirm.
Type the code MS Authenticator App generates to verify and link your npm account.
5
Save your backup codes.
Store the recovery codes npm gives you somewhere safe — you'll need them if you lose your phone.

Menu names on npm can change — the official npm 2FA documentation ↗ always has the exact, current path.

Frequently asked questions

Does npm work with authenticator apps like MS Authenticator App?: Yes. npm supports TOTP authenticator apps, so you can generate its two-factor codes in MS Authenticator App.
Is npm two-factor authentication free?: Yes. Enabling authenticator-app 2FA on npm is free — you only need the free MS Authenticator App.
What if I lose access to my npm 2FA codes?: Use the backup or recovery codes you saved during setup. If you didn't save them, contact npm support to regain access, then re-add the account to MS Authenticator App.
Should I use an authenticator app or a security key on npm?: npm supports both. An authenticator app like MS Authenticator App is free and works on any phone; a hardware security key adds phishing resistance. You can enable both.

Generate your npm codes in MS Authenticator App

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Developer guides

Novaz is not affiliated with, endorsed by, or sponsored by npm. npm and its logo are trademarks of their respective owner and are used here for identification only.