Because we value privacy and security, we now give all our new users the opportunity to use multi-factor authentication (MFA) every time they log in. MFA is a robust security process which requires two distinct codes to authorize the login to an account.

When logging into Withings App with MFA enabled, you will first be asked for a passcode that was sent to you by email and then for a security code that was sent to your phone.

If you already have an account

Please follow these steps to enable MFA:

1. Open the Withings App.
2. Select Profile.
3. Select the Settings gear icon in the upper-right corner. 
4. Select Account & Security.
5. Select Multi-factor authentication.
6. Select One-Time Password (TOTP) under 'Time-Based.' (recommended)
7. Select a Phone-Based authentication method via one or all three methods:
   - WhatsApp
   - SMS
   - Phone Call
8. If you choose a Phone-Based authentication method, enter the phone number to use as a second factor and select Next.
   Note: Phone and SMS are only supported in certain countries. Learn more.
9. A confirmation code will be sent to the phone number provided. Please enter this and select Continue.
10. Important: The next screen will provide you with a recovery code that can be used if you can't login with MFA. Please save the recovery code somewhere safe.
11. Select Next to complete the MFA setup.

Note: MFA is not available for the other Withings apps (Thermo, WithBaby, Withings Home. WiScale). You will have to disable MFA in order to access your account from those apps.

If you don't already have an account

Please follow these steps to create one:

1. Download the Withings App (available on the Google Play Store).
2. Open the Withings App.
3. Enter your email address.
4. Check your inbox for the confirmation code that was sent to you.
5. Enter the code you’ve been provided to confirm your email.
6. Confirm your agreement to Withings’ privacy policy.
7. Fill in your user details.
8. Select Continue to set up MFA.
9. Select Next  or Skip (not recommended).
10. You will receive a setup key associated with your account email.
11. Enter the setup key into your Authenticator App.
    Note: You can also choose to use a QR code.
12. If you don't have an authentication app, you can select one from the links on this page:
    - Google Authenticator
    - Microsoft Authenticator
    - iPassword
13. Select Next.
14. Enter the password displayed on your authentication app.
15. When prompted, record your recovery code somewhere safe and secure.
16. Select I copied the code.
17. Select Done.

What is my recovery code? 

If you set up Multi-Factor Authentication (MFA) to log in to the Withings App, you will be provided with a recovery code in case you can't use your phone to access your account (e.g. you lost your phone or you've recently changed your phone number).

The recovery code is displayed at the end of the MFA setup. It is a unique code that must be stored in a safe place (e.g. not on your phone since you will need the code if you do not have access to your phone).

You can access the recovery code any time via the web dashboard.

You can also access the code at a later time from within the Withings App:

1. Open the Withings App.
2. Select Profile.
3. Select the Settings gear icon in the upper-right corner. 
4. Select Account & Security.
5. Select Multi-factor authentication.
6. Select Recovery code. 
7. Authenticate with a temporary code sent to your email.
8. Enter the temporary code.
9. Enter the code from your authenticator app.
10. Select Next (or choose Use Another Method).
11. When prompted, record your recovery code somewhere safe and secure.
12. Select I copied the code.
13. Select Done.