Stillcode › Two-factor authentication

Two-factor authentication, service by service

Fifty services: what each one actually supports, a link to its own setup instructions, and the question none of those instructions answer — what happens to your codes when the phone they live on stops existing.

Start here

How authenticator codes work
Where the six digits come from, and why nobody can resend them
When the phone holding your codes is gone
What still works, and the check to run before it happens

The short version, and it is the same on every page here. An authenticator code is computed on your device from a secret you were given once. Nothing transmits it, which is the security property — and which is also why nobody can send it back to you. If that secret exists on one device only, one accident ends it.

So the useful thing to do today is not to read fifty pages. It is to find your recovery codes for the two or three accounts you cannot afford to lose, and to count how many devices your codes exist on.

Developer and hosting

Amazon Web Services Atlassian Bitbucket Cloudflare DigitalOcean GitHub GitLab Heroku Netlify

Social and messaging

Discord Facebook Instagram LinkedIn Reddit Slack Snapchat TikTok X (Twitter) Zoom

Money, payments and crypto

Binance Bybit Coinbase Kraken PayPal Stripe Wise

Shops and storefronts

Amazon Etsy GoDaddy Namecheap Shopify Squarespace WordPress.com

Gaming

Epic Games Nintendo Account PlayStation Network Roblox Twitch Xbox

Work and files

Asana Canva Dropbox Evernote Figma Google Account Mailchimp Microsoft Account Notion Proton Trello

How this list was chosen

Every service here supports an authenticator app, and publishes its own instructions for switching one on. Services that offer only SMS, or only software of their own, are deliberately absent — a page recommending an authenticator app for an account that cannot use one would be a page written for a search engine rather than for a person.

Bar chart of the second factors accepted across 50 services: Authenticator app (TOTP) 50, SMS text message 35, Hardware security key 23, The service’s own app 9, Email 8, Voice call 6, The service’s own device 3.
What each of the seven second factors costs you, written out once rather than fifty times.

Data sourced from 2FA Directory by 2factorauth. Snapshot 2026-09-24, filtered to the 50 services above.

Where Stillcode fits

Stillcode is an iPhone, iPad and Mac authenticator that makes no network calls at all. Unlimited accounts, bulk import, search, the Face ID lock and moving an account out by QR code are free; iCloud Keychain sync, the encrypted export file and restoring from one are Stillcode Pro.

Get Stillcode on the App Store