Two-factor authentication is required to log into your Elementor account. This adds an extra layer of security for your account and websites.
- Go to either the Elementor home page or to your My Elementor dashboard.

- Log into your Elementor account using the same method you created your account:
- Using your Google account
- Using your Facebook account
- Using your Apple ID
- Using your email address and password.
- You also have the option of creating a passkey which allows you to sign in without needing a password. See below for details.NoteIf you use your email address and password, you will also need access to your email account as you will need to enter a verification code sent to your email.

- If you sign in with email, enter your email address and password and click Sign in.
- A verification code will be sent to your email. This code will be valid for five minutes. Enter the verification code.

- Once you’ve entered the code, you’ll be able to click Verify my account.
Secure Your Elementor Account with Multi-Factor Authentication
To keep your account safe, Elementor enforces multi-factor authentication (MFA) on every account by default. You can create your account, but you’ll be asked to verify your email. You can set up additional authentication methods to make getting back to your account easier while keeping it secure.
You can enroll authentication methods from two categories:
Sign-in methods — replace your password at sign-in and skip two-factor authentication:
- Passkeys — sign in passwordlessly using Face ID, Touch ID, a fingerprint, or your device PIN. A passkey verifies your identity in a single step, so there’s no separate two-factor prompt afterward.
- Social Login — sign in using Google, Facebook, or Apple. Two-factor authentication is handled by your social provider and Elementor won’t prompt you to set up an additional method
Two-factor methods — add a second verification step after you sign in with your password:
- Authenticator app (TOTP) — use Google Authenticator, Authy, Apple Passwords, or any other authenticator app to generate a 6-digit code at sign-in. Comes with single-use backup codes for recovery.
- SMS verification — receive a 6-digit code as a text message to your phone at sign-in.
This article walks through setting up, using, and removing each method.
Note
If you sign in to Elementor only through Google, Facebook, or Apple, two-factor authentication is handled by your social provider and Elementor won’t prompt you to set up an additional method. If you later add an email and password to your account, you’ll be prompted to enroll a passkey or authenticator app on your next sign-in.
To access Security Settings
- Go to your My Elementor dashboard.
- Click your profile icon in the top-right corner.

- Select My Profile from the dropdown menu.

From here you can add and remove authentication methods, set your primary two-factor method, and regenerate backup codes.
Set up a passkey
A passkey is a passwordless sign-in credential that lives on your device or in a credential manager. When you sign in with a passkey, your device verifies your identity using its built-in authentication (Face ID, Touch ID, fingerprint, or PIN) — and that’s it. There’s no separate two-factor step.
Each Elementor account can have one passkey at a time.
To add a passkey:
- In My Profile, click Add a passkey.

- Confirm your identity if prompted.
- Follow your device’s native prompt to create the passkey — for example, scanning your face, touching the fingerprint sensor, or entering your device PIN.
- The new passkey is saved and listed in your authentication methods.
Set up an authenticator app
An authenticator app generates a 6-digit code that refreshes every 30 seconds. After entering your password at sign-in, you’ll enter the current code from your app to complete the verification. Authenticator apps work offline and don’t depend on SMS or email delivery, which makes them a reliable choice for two-factor authentication.
To set up an authenticator app:
- In My Profile, click Set up authenticator app.

- Confirm your identity if prompted.
- Open your authenticator app (Google Authenticator, Authy, Apple Passwords, 1Password, etc.) and scan the QR code shown on screen.
- Don’t have a camera or can’t scan? Click Enter code manually to view the setup key as text. Paste it into your authenticator app instead.
- Your authenticator app will start generating 6-digit codes. Enter the current code into Elementor to confirm setup.
- Save your backup codes (see below).
The next time you sign in with your password, Elementor will prompt you for the current 6-digit code from your authenticator app.
Save your backup codes
Backup codes are a recovery option tied to your authenticator app setup. Right after you confirm your authenticator app, Elementor shows you a set of 8–10 single-use backup codes. These let you sign in if you ever lose access to your authenticator — for example, if your phone is lost, broken, replaced, or if you accidentally delete your Elementor entry from the app.
You can:
- Download the codes as a .txt or .pdf file.
- Copy them to your clipboard.
- Print them.
You can generate a new set of backup codes at any time from My Profile → Authenticator App → Ellipsis menu → Regenerate backup codes. Regenerating invalidates your previous set immediately, so update wherever you’ve stored them.
Set up SMS verification
SMS verification sends a 6-digit code to your phone via text message at sign-in. It’s a useful option if you’d prefer not to install an authenticator app, or as an additional fallback method alongside one.
To set up SMS verification:
- In My Profile, click Set up SMS verification.

- Confirm your identity if prompted.
- Enter your mobile phone number, including the country code.
- Elementor will send a 6-digit code to that number. Enter the code to confirm the phone number is yours and complete setup.

The next time SMS is used at sign-in, Elementor will text a fresh code to the same number after you enter your password.
Switch verification methods at sign-in
If your two-factor method isn’t available, click Try another way below the two-factor prompt. You’ll see a list of every other method enrolled on your account and can sign in with any of them. If none of your enrolled methods work, you’ll then be offered the option to use a backup code as a last resort.
Set a primary two-factor method
If you’ve enrolled more than one two-factor method (for example, an authenticator app and SMS), one of them is your primary — the one Elementor shows by default when you’re prompted for two-factor verification at sign-in. To change it:
- Go to My Profile.
- Find the method you’d like to set as primary in your enrolled methods list.
- Click the ellipses and select Set as preferred.

The previously primary method becomes a secondary option and will still be available through Try another way.
Remove an authentication method
You can remove any enrolled method when you no longer use it.
- In My Profile, find the method in your enrolled methods list.
- Click the ellipses and select Remove.

- Confirm your identity when prompted.
- Review the confirmation dialog, which names the method being removed, and click Confirm.
What happens when each method is removed
- Passkey — The credential stored on Elementor’s side is deleted, and you can enroll a new passkey from any device afterward. The passkey itself remains on your device until you delete it manually through your device’s settings (e.g., iCloud Keychain on Apple devices, Google Password Manager on Android, or your browser’s passkey manager).
- Authenticator app — Your authenticator setup is invalidated immediately. Any unused backup codes tied to that setup are also invalidated. If you set up an authenticator app again later, you’ll get a fresh set of backup codes.
- SMS verification — Your phone number is removed from your account and will no longer receive sign-in codes. To use SMS again, set it up from scratch with your current number.
Troubleshooting
“This code doesn’t match”
Authenticator app codes are time-based, so an out-of-sync device clock is the most common cause of code mismatches. Check that your phone’s time is set to update automatically, wait for the next code to refresh, and try again.
“This recovery code was already used”
Backup codes can only be used once. Try a different code from your saved list, or if you’ve used them all, sign in with another enrolled method and regenerate a fresh set from Security Settings.
Didn’t receive an SMS code
Text messages can be delayed by carrier networks, especially when roaming or in areas with weak signal. Wait a minute, then click Resend code. If it still doesn’t arrive, sign in with another enrolled method using Try another way, and consider updating your phone number in Security Settings if it’s no longer current.
“This device already has a passkey for your account”
A passkey already exists for your account on this device. You can use the existing passkey to sign in, or remove it from your device’s credential manager before creating a new one.
“Too many sign-in attempts”
For your security, the account is temporarily locked after repeated failed attempts. Wait a few minutes and try again, or reset your password if you’ve forgotten it.
Lost access to all your methods
If you can’t sign in with any of your enrolled methods and don’t have any backup codes left, contact support for help recovering your account.
Have more questions?
Can’t find the answers you’re looking for? We’re more than happy to assist.
Related Articles
- Understanding your Elementor account
- Sign in to Elementor with Google, Facebook, or Apple
- Reset your Elementor password