Two Factor Authentication
What is Two-Factor Authentication (2FA)?
Two-Factor Authentication (2FA) is an additional layer of security that ensures you are the only person who can access your SoundCloud account, even if someone else gets access to your password. Anytime someone tries to sign into your account, they will be required to enter a second security code from a connected authentication app (We suggest Google Authenticator on iOS or Android, LastPass Authenticator, or Authy).
Important: During the 2FA installation process, you will be provided with a set of backup codes. These are 10-digit numbers that can be used in place of the usual 6-digit code generated by the authenticator app.
Please download and store these backup codes in a secure location during the setup process.
If you lose your phone or switch to a new one, you can still access your account using the stored backup codes until the authenticator app is reconfigured on your new device.
2FA is currently not available via SMS.
How can I add Two-Factor Authentication?
2FA can only be set up or removed via the SoundCloud website. However, it will be enforced on the website and the SoundCloud apps.
Before setting up, it is important that you:
- Have a confirmed email address. This is useful if you ever lose access to your account. You can see your email address in Settings on the website - there will be a notice if it is not yet confirmed
- You will also need a 3rd Party Authentication app such as Google Authenticator or Authy
When you are ready to add 2FA:
- Go to www.soundcloud.com and then to the settings page
- Click on the Two Factor Authentication tab
- Scan the QR Code with your authentication app and enter the 6 digit code. This pairs your device with your SoundCloud account
- If you are unable to scan the QR code, you can enter the Set Up Key directly to your authentication app. It will then give you a 6 digit code to enter back into SoundCloud.
- You will then see a collection of BackUp Codes. These are 10 digit numbers that you can use instead of the normal 6 digit code you get in the app. This is useful if you cannot access your phone. Download the BackUp Codes and store in a secure location
- Success! Your account is now protected with 2FA
How can I recover my Two-Factor Authentication (2FA)?
1. Download Your Two-Factor Authentication (2FA) backup codes
When you enable two-factor authentication on SoundCloud, you’ll receive a set of recovery codes to download and save.
These backup codes allow you to securely access your account if you lose access to your phone. Please note that the backup codes are available for download only once during the configuration of the 2FA. It is not possible to download the code later after configuring the 2FA.
Important: To keep your account secure, do not share or distribute your backup codes. For best security practices, save these codes with a secure password manager.
2. Configuring Backups for Your Time-Based One-Time Password (TOTP) app
Most time-based one-time password (TOTP) apps provide a backup option, allowing you to restore your authentication data on another device. This backup ensures you retain access to your SoundCloud account even if you lose access to your primary authentication device.
Note: The process for setting up TOTP backups varies depending on the app you’re using. For instructions, consult the documentation for common TOTP apps like:
I already have 2FA on SoundCloud for Artists, how can I set it up?
Some users of SoundCloud for Artists (previously Repost) already have 2FA configured.
If you already used 2FA via App then you have been migrated to the new system. Your existing codes will still work across all of SoundCloud.
Note: It is not possible to change the name listed in your authentication app. That is why it still says “Repost”. We suggest re-configuring in the new system so that it is named “SoundCloud”. This will only take 1 minute!
If you had SMS 2FA configured, then you were not automatically migrated as the new system does not support SMS. You will need to reconfigure 2FA in the Settings page following the instructions above.
Note: Your SMS 2FA will continue to apply on SoundCloud for Artists. Once you add the new 2FA, it will replace the old SMS 2FA.
I've enabled 2FA and connected SoundCloud with my Authenticator app, but my codes are invalid?
Authenticator app 2FA codes are based on time and thus require the time on your phone to be in-sync with the official time.
You can disconnect your phone from the internet and as long as its time is still correct, it will successfully generate correct 2FA codes. However, manual time settings and offline devices eventually slip out of sync.
If your phone's time is out of sync or if you have changed time zones, the best way to fix it is to change the time settings on your phone from "Manual" to "Automatic". If it is already set to 'Automatic' toggle it off and on to re-sync the app.
I'm locked out, what can I do?
If you’ve lost access to your 2FA credentials, here are some methods that can help you get back into your account.
Using a Two-Factor Authentication Backup Code
During enabling 2FA configuration, you were provided a set of backup codes which were available for download only once.
These codes are designed to let you log in even if you cannot access your authentication app.
Steps to use backup codes:
- On the login screen, enter your username and password
- When prompted for your 2FA code, choose the option to enter a backup code instead
- Enter one of your backup codes to complete login
If you no longer have your backup codes, please try one of the alternatives below.
For iPhone Users: Finding Your 2FA Code in Apple Keychain
If you're using an iPhone and can't locate the 6-digit code in your authenticator app (e.g., Google Authenticator or Authy), check if the code is stored in your Apple Keychain:
- Open your iPhone's Settings
- Navigate to Passwords
- Search for your account (soundcloud.com)
- If available, use the 6-digit code from the Verification Code section
Restoring 2FA Codes from your old phone
If you’ve recently switched to a new phone and have not installed your authentication app on it yet, you can retrieve your 2FA codes from the app on your old phone.
- Open your authenticator app (such as Google Authenticator, Authy) on the old phone
- Find the code associated with your SoundCloud account and use it to complete login on your new phone
Alternatively, install your authentication app on the new phone and restore from any backup associated with your authenticator app.
Note: The Process to transfer codes from the old phone is different for different apps:
If you’ve reset your phone
If your phone has been reset, and you’ve lost both the authenticator app and backup codes, reinstall the authenticator app and try restoring the authenticator app’s backup.
If you cannot access your 2FA codes, backup codes, or your old phone, we should be able to help if you create a ticket.
We will need to verify your identity before granting you access - this is for your own security, so that we don’t risk letting other people into your (or anyone elses’ account).
Please ensure you are writing in via the email address connected with your SoundCloud account.