Reference

Two Factor Setup: Lock Your 88new Account Down

Two factor authentication adds a second check every time you log in — so even if your password leaks, nobody gets into your account without your phone.

OTP VerificationApp AuthenticatorSMS Code OptionDevice Session Control
Explore the Lobby Read FAQ
88new Two Factor Setup: Lock Your 88new Account Down
88new What Two Factor Authentication Does for Your Account

What Two Factor Authentication Does for Your Account

When you switch on two factor authentication in your account settings, every login triggers a second verification step. You enter your password as normal, then confirm with a one-time code sent to your registered mobile number or generated by an authenticator app. The code expires within 30 seconds, so it cannot be reused. Players in Denpasar who move between their phone browser

and a desktop session will notice the prompt on each new device — this is expected behaviour and confirms the protection is working. Your e-wallet connections to DANA, OVO, or GoPay stay intact after enabling 2FA; wallet verification only runs on the first link, not on every login.

SECURITY STANDARDS

How We Keep Your 2FA Process Reliable

Two factor authentication on 88new is handled through industry-standard protocols. Here is what that means in practice for your account and your wallet connections.

Time-Based One-Time Passwords We use TOTP — the same standard behind Google Authenticator and Authy. Each code is unique to your account and valid for 30 seconds only, making replay attacks ineffective.
Encrypted Code Delivery SMS codes travel over an encrypted gateway. They are tied to your registered number, so a code sent to your number cannot be used on a different account.
Session Binding After 2FA passes, your session is bound to the device and browser. A fresh login from a new device — or after clearing cookies — triggers a new verification prompt automatically.
Backup Code Option When you enable 2FA, we generate a set of one-use backup codes. Store these offline. If you lose access to your phone or authenticator app, a backup code lets you recover your account.
SETUP HELP CHANNELS

Need Help Activating Two Factor Authentication?

If the verification code does not arrive, or if you are locked out after enabling 2FA, our support team can reset your authentication method. Reach us through any of the channels below — available around the clock for account security issues.

Live Chat Open the chat widget from any page in your account. For 2FA lockouts, select Account Access from the topic menu so the agent picks it up immediately.
Email Support Send your registered email address and a brief description of the 2FA issue. Include your account username so the team can verify identity and reset your authenticator.
Help Centre The Help Centre has a dedicated two factor section with step-by-step screenshots for both SMS and app-based codes, covering Android and iOS device flows.

Two Factor Authentication Terms You Should Know

Quick definitions for the terms that come up when you set up or troubleshoot two factor authentication on your account.

What is TOTP?

TOTP stands for Time-Based One-Time Password. It is a six-digit code generated by an authenticator app that refreshes every 30 seconds and is unique to your account.

What is an authenticator app?

An app installed on your phone — such as Google Authenticator or Authy — that generates TOTP codes locally without needing internet or SMS, tied to your account secret key.

What is a backup code?

A single-use recovery code issued when you enable 2FA. Each code works once only. Use it if you lose your phone and cannot receive your normal authentication code.

What is a session in account security?

A session is the active login window between your device and your account. Two factor authentication validates each new session, so switching browsers or devices starts a fresh check.

What does OTP mean?

OTP stands for One-Time Password. It is a code sent to your registered mobile number via SMS that verifies your identity during login. It expires quickly and cannot be reused.

What is account binding in 2FA?

Account binding links your authenticator app or phone number directly to your account. Only the bound device can generate or receive valid codes for your specific login.

Common Questions About Setting Up Two Factor Authentication

These are the questions we see most often from people activating or managing two factor authentication. If your question is not here, live chat can help you in real time.

Go to your account settings, select Security, then choose Two Factor Authentication. Pick SMS or authenticator app, scan the QR code or enter your mobile number, then enter the first code to confirm activation.

Yes. Both apps work with our TOTP setup. Open the app, tap Add Account, scan the QR code shown in your security settings, and the app starts generating codes immediately. No internet needed after setup.

Your DANA, OVO, and GoPay wallet connections are not affected. Two factor authentication secures your login session only — wallet verification runs separately during the initial link and on manual re-verification requests.

Use one of the backup codes issued when you first set up 2FA. Enter it in place of the normal code at the login screen. Then go to security settings to link your new device and generate a fresh backup code set.

This usually happens when your phone's clock is out of sync. TOTP codes are time-sensitive. Open your phone's date and time settings, switch to automatic time sync, then try generating a new code.

Two factor authentication is required at login. Withdrawal requests also go through identity verification on the wallet side — for example, confirming your OVO or GoPay account matches the name on your 88new account.

Related pages

88new Indonesia 88new App FAQ Barong Dance Megaways About Us