Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Yes. PayPal supports an authenticator app for 2-step verification (two-factor authentication, or 2FA). For a US account, set it up on PayPal’s website in a browser: open Settings > Security, choose Set Up beside “2-step verification,” select Use an authenticator app, and follow the prompts. PayPal names Google Authenticator and Microsoft Authenticator as examples.

What PayPal authenticator verification does

An authenticator app generates a time-limited code that you enter as an additional verification step when PayPal asks for it. It is an app you choose, not a separate PayPal-branded authenticator. PayPal’s US instructions name Google Authenticator and Microsoft Authenticator as examples; availability of the setting can vary by account and region. PayPal’s US setup instructions

Two-step verification is an extra check beyond your password. PayPal may also request identity verification in particular circumstances, such as signing in from a new device or detecting unusual activity. That contextual check is not necessarily the same as the authenticator-code flow, and the choices shown can vary. PayPal’s MFA guidance

Set up an authenticator app for PayPal

Use PayPal in a web browser. PayPal’s North America help page says setup and disabling are done through a browser, not the PayPal app. PayPal’s North America instructions

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
  1. Sign in to PayPal’s website in a browser.
  2. Open the Settings icon, then select Security.
  3. Choose Set Up beside “2-step verification.”
  4. Select Use an authenticator app.
  5. Follow the on-screen instructions to connect the authenticator app and complete verification.

Menu wording can differ by account or region, so use the labels and options displayed after signing in. If you do not see the setting, check the Security section on the website and consult PayPal’s country-specific help; the US instructions do not establish that every account has identical controls.

Never share a 2-step verification code. PayPal says it will not ask you to provide that code by phone, email, or text. PayPal’s account security guidance

Rank #2
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

How authenticator codes differ from PayPal’s other sign-in checks

PayPal describes several ways to verify identity, but they are not interchangeable features. Which ones appear depends on the account, region, and sign-in situation.

Method What you do or receive How it differs
Authenticator app Enter a code generated by an authenticator app. A supported 2-step verification code method in PayPal’s US instructions.
SMS Enter a one-time code sent by text. Another one-time-code option listed on PayPal’s US security page; it is not an authenticator-app code.
PayPal app prompt Confirm an identity-check request in the PayPal app. A contextual identity-verification route, not the same as entering an authenticator code.
Passkey Sign in using a passkey protected by the device’s unlock method. A password alternative described separately by PayPal, not an authenticator code. PayPal says biometric data is not shared with it.

PayPal’s MFA guidance describes possible identity checks and code delivery through channels such as SMS, WhatsApp, email, phone call, or certain external apps in some circumstances. These are not guaranteed options for every user. PayPal’s MFA guidance For its US one-time-code options, see PayPal’s security page; for passkeys, see PayPal’s passkey help.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Thetis FIDO2 Security Key (USB-A, 2-Pack) - Hardware MFA & Passkey Access for Business, School ERP & Employee Accounts | Compatible with Windows, Google Workspace, Apple ID, Coinbase, Salesforce
  • FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
  • Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
  • Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
  • Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
  • Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.

If the setting is missing or you cannot verify

The authenticator option is not visible

Sign in through a browser and inspect Settings > Security. Follow the current on-screen labels rather than assuming the PayPal app has the same controls. If the option remains unavailable, check official PayPal guidance for your country or contact PayPal support; the documented US steps do not guarantee identical availability across all countries or account types.

You cannot access your usual verification method

Choose Try another way or the equivalent option shown on the verification screen. Depending on the circumstances, PayPal may offer another identity check, such as a text or call, information checks, security questions, card confirmation, email, or an app prompt. Keep your contact details current, and contact official PayPal support if the available choices do not work. PayPal does not promise that every recovery route will be offered to every account. PayPal’s identity-check guidance PayPal’s MFA guidance

Rank #4
Sale
Thetis Nano-A FIDO2 Security Key Hardware Passkey Device with USB Type A, TOTP/HOTP, FIDO2.0 Two Factor Authentication 2FA MFA, Works with Windows/mac/iOS/Android/Linux/Gmail/Facebook/GitHub/Coinbase
  • Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
  • USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
  • FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
  • Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
  • Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.

You are changing or losing a device

If you use a passkey, PayPal says a lost-device user can still try signing in with a password or one-time passcode. Remove a lost device’s passkey from the PayPal account; when deleting a passkey, PayPal says to remove it both from the account and from the device’s password manager. This is passkey-specific advice and does not recover an authenticator app’s setup or secret. PayPal’s passkey help

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Turning off authenticator-based verification

PayPal’s North America guidance says 2-step verification can be turned off in account settings through a web browser. Before changing it, make sure your contact information is up to date and consider the other identity-confirmation routes PayPal describes, including passkeys or the PayPal app. The exact controls may vary by account and region. PayPal’s North America instructions PayPal’s MFA guidance

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-C Type TrustKey T120
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.