Where to use this guide
Buburuza mobile and web account security. This guide covers an authenticator option when it is offered during setup or in your signed-in security settings.
Before you start
Have access to your Buburuza account and the authenticator app you intend to use. Start only from the official app or web account, and keep the setup key or QR code private.
Two-factor authentication adds a second check when you sign in or approve a protected action. Review the security options available in your Buburuza account and enable the supported method shown there.
If the app offers an authenticator
Start setup from the security settings in the official app. During registration, use the security setup offered for your account instead. Follow the displayed instructions to add the account to your authenticator.
- At security setup, choose Set up 2FA instead on mobile or Set up a code instead on the web.
- On mobile, copy the setup key into a new entry in your authenticator app, then choose I’ve added the key in Buburuza.
- On the web, scan the displayed QR code with your authenticator app. Use the manual-key option if you cannot scan it.
- Return to Buburuza and enter the six-digit code currently shown for that entry. On the web, choose Verify.
- Save the recovery codes using Copy or Download and confirm that you have stored them privately.
- Check that the app reports the method as enabled before leaving setup.
If recovery codes are provided, store them securely and separately from your device. Keep the setup QR code, secret key and recovery codes private.
Expected result
Check that the app reports the authenticator method as enabled after you confirm its current code. Store any recovery codes privately before leaving setup.
If setup does not work
- If the code is rejected, check that the authenticator entry is for Buburuza and enter the current code.
- Set up passkey instead or Use a passkey instead returns to the alternative security setup shown in the flow.
- Do not share the setup key, QR code, authenticator code, or recovery codes.
Protect your second factor
Do not send authentication codes to anyone or approve an unexpected request. Keep your device locked and updated.
If you lose access, see Recovering access if you lose your authenticator app. If setup fails, contact support with the error description, without including codes or setup secrets.