One check for every Blizzard game
It sits on the Battle.net login itself, so every game on the account waits behind the same approval.
Battle.net Authenticator
The Battle.net Authenticator is Blizzard’s two-step login check, and it guards the one account behind World of Warcraft, Overwatch, Diablo and everything else you launch from Battle.net. There is no separate authenticator app anymore. It lives inside the Battle.net Mobile App and needs a text-capable phone number on your account. Below is the current setup, the restore code almost nobody writes down, and the right way to move or remove it.
Last checked against official sources on November 1, 2026.
Every row links to the Blizzard Support article it comes from.
Step 1
Attaching an authenticator requires Battle.net Phone Notifications, so start with a number that receives texts. Add it on Account Details, or let the app prompt you in step 3. VoIP numbers will not work.
Step 2
Get it from your phone’s app store; it needs Android 6.0 or iOS 26.0 or later. Any guide that sends you to a separate authenticator app is out of date.
Step 3
Log in with your Battle.net email and password. The app offers to enable the Authenticator, texting a code to verify your number if needed. No prompt? Open the slide-out menu at the top left and tap Authenticator.
Step 4
If the account never had an authenticator, Blizzard kicks it out of the desktop app, any running game and other mobile apps while it attaches. Finish your match or raid first.
Step 5
Tap the cogwheel in Authenticator and choose Serial and Restore Codes. Blizzard recommends a screenshot of both; keep a second copy off this phone, since the phone is what you might lose.
Step 6
Sign out of the desktop app and back in, check that the request code matches, and tap Approve. To be asked on every login, not just new devices and locations, change it on the Account Security page.
It sits on the Battle.net login itself, so every game on the account waits behind the same approval.
Blizzard puts a security check on accounts after unusual logins, and says an authenticator can prevent future checks.
When Blizzard restores a hacked account, support asks the owner to add one and calls it the best security feature against hackers.
WoW players get the Core Hound Pup and, with phone notifications on, a bigger backpack. Both go away if you remove the authenticator.
Blizzard’s articles use two names for one thing: the same setup step says Battle.net Phone Notifications in one article and SMS Protect in another. Both mean a verified mobile number on your account, and the authenticator will not attach without it.
When you cannot log in, a text to that number can unlock the account, remove a lost authenticator, recover your account name or approve a password reset. It also alerts you to password changes, security feature changes and logins that lock the account.
The number belongs to you, not the handset, so a replacement phone with the same number keeps working. If you change numbers, update it first on Account Details, verifying with an authenticator, SMS or email code. Support staff cannot add a number for you.
Older videos show a standalone Battle.net Authenticator app. Blizzard moved it into the Battle.net Mobile App with a migration deadline of January 5, 2024, and said it would then remove authenticators from accounts that had not moved, reset their passwords and notify them. If yours vanished in early 2024, that is why.
Physical keychain authenticators are legacy too. Blizzard says a fob giving invalid codes may have a dead battery that knocked its timing out of sync, and points owners to the mobile app. Remove the physical one before attaching the mobile one.
One setup trap: if a serial number gets “Invalid Serial Number”, Blizzard’s first fix is to leave out the dashes.
Blizzard’s help pages only describe its own authenticator inside the Battle.net Mobile App. None of them list Google Authenticator, Authy or another app for Battle.net, and Blizzard does not support the same serial number on more than one device. Tricks that copy the secret into another app are outside anything Blizzard documents.
Call of Duty players can mix the two up. The Activision account behind Call of Duty has its own 2FA that does use third-party apps, and Blizzard Support says it cannot help with Activision accounts.
Battle.net also supports passkeys, which replace the password at sign-in and live on your phone or PC. Open the Security section of your account, select +Create a passkey and follow the prompts on the device that will hold it. Blizzard frames it as an addition to the authenticator, not a replacement. Lose the passkey device and you can still sign in with your password or an emailed one-time code, then remove it.
With the serial number and restore code in hand, it takes a minute. Install the Battle.net Mobile App on the new phone, open Authenticator, choose Restore my Authenticator and enter both codes. Each authenticator is tied to one device and Blizzard does not support the same serial on two phones, so a restore is a move, not a copy.
Never saved the codes but still have the old phone? Copy them from its cogwheel menu first. Or detach the authenticator on the website and attach a fresh one on the new phone.
If the old phone is already gone, the fix depends on whether your number still works. Our lost-phone guide covers it in order.
Sign in to the Account Security page at account.battle.net, click Update, then Detach Authenticator and Detach. Pass the security check with a text to your phone or a code from the authenticator, submit, and the serial number is unlinked.
Disabling the authenticator inside the mobile app is not the same. Blizzard notes that it does not detach the authenticator from your account; detaching only happens in your account settings on the website.
Locked out? Start with Can’t Log In on the login screen. With SMS on the account, a text verification removes the old authenticator; without it, Blizzard says to try account recovery, then contact support.
Blizzard has a short fix for most authenticator errors.
A screenshot of your restore code only helps until you lose the phone holding it. Blizzard’s security checklist says a password manager can help generate and store stronger passwords, and a LoginScout card keeps the login and these notes together, encrypted on your device.
Not as its own app. The authenticator is part of the Battle.net Mobile App now. Blizzard migrated the old app in January 2024 and says the standalone version is no longer supported.
In the Battle.net Mobile App, tap your profile at the top left, then Authenticator, the cogwheel icon, and Serial and Restore Codes. Copy both while you still have the phone.
No. An authenticator attaches to one account, and since it needs a phone number that can only be on one account, a second account needs its own number and authenticator.
Blizzard’s help pages do not offer that; they only cover the authenticator in the Battle.net Mobile App. It is the Activision account for Call of Duty that uses third-party authenticator apps.
No. Only Blizzard can remove an authenticator you can no longer reach, through Can’t Log In or a support ticket. LoginScout keeps your serial number and restore code safe so you can restore the authenticator yourself.
Checked against these official pages on November 1, 2026. Platforms change their settings and menus often. If something here no longer matches what you see, email [email protected] and we will fix the page. LoginScout is independent and not affiliated with the companies named here.
Create a free vault, then upgrade for a private temp mailbox and burner numbers when the library grows.