Stillcode › Two-factor authentication › Zoom

Two-factor authentication on Zoom

Zoom takes both a texted code and a generated one, and they are not equivalent. Which is which, where its instructions are, and what happens when the phone holding your codes is gone.

What Zoom supports

These are the second factors Zoom offers on zoom.us. Which ones you see can depend on your plan and your country; what each of the seven actually costs you is set out once.

MethodWhat it is
Authenticator app (TOTP)SupportedComputed on your own device; nothing is sent to produce it.
SMS text messageSupportedTexted to your number, so your carrier is part of the lock.
Hardware security keyNot offeredA physical key you tap; the one option phishing does not beat.

Data sourced from 2FA Directory by 2factorauth. Snapshot 2026-09-24.

What that particular mix means

Zoom offers both SMS and an authenticator app. They are not equivalent — a texted code depends on your mobile carrier and survives no longer than control of your phone number, while a generated code never travels. If both are enabled, the account is only as strong as the weaker one, because an attacker picks.

Where this page's facts come from

Of the fifty services on this site, thirty-five take both a texted code and a generated one, and Zoom is one of them. Eleven of the fifty accept exactly this combination, so the same decision comes up on ten other services here. Among the five services filed under communication, one accepts a hardware security key — Zoom not among them.

The directory files Zoom under communication, records two of the seven second factors it tracks, and points at instructions published at support.zoom.com/hc/article?id=zm_kb&sysparm_article=KB0066054. That host is worth a second look: it is not zoom.us, which is the address the same record gives for Zoom itself.

Switching on an authenticator app

Zoom's own instructions: Zoom — two-factor authentication — linked, never copied, because a stale menu path here locks people out.

If the phone holding your Zoom codes is gone

Zoom publishes no dedicated page for losing your second factor, which in practice means the route back is ordinary account recovery: proving who you are to support, on their timetable.

Background: how the codes work · what still works when the phone is gone.

Other services in the same place

Facebook Instagram X (Twitter) LinkedIn

Where Stillcode fits

An iPhone, iPad and Mac authenticator for these codes that makes no network calls at all. What is free and what Pro adds. Get it on the App Store