Help center

To change your 2FA authentication method from SMS to TOTP (authenticator app) in the mobile application:

Tap the profile icon in the top-left corner.
Go to Security → Two-Factor Authentication.
Select Authenticator App and follow the on-screen instructions.
You will be prompted to download an authenticator app (e.g., Google Authenticator or Microsoft Authenticator) from your app store, then either copy the key or scan the QR code.
Enter the generated 6-digit code from your authenticator app into the XTB app to confirm the change.
Before completing the process, backup codes will be displayed. These codes can be used if you encounter login issues. Each backup code can be used only once, so make sure to save and store them in a secure place.

Important: Please note that the above change to your authentication method is only possible if you currently have access to your account—meaning your current phone number in our system is correct and you can successfully receive the SMS messages required to authorize the process.

If you do not have access to your account (e.g., due to a change of phone number) or are experiencing general difficulties logging in (such as not receiving SMS codes), you will not be able to complete this self-configuration. In this case, please contact our Customer Support by phone immediately to verify and update your details.

Cookie name	Description
SERVERID
userBranchSymbol	Expiration date 1 day
adobe_unique_id	Expiration date 364 days
test_cookie	Expiration date 1 hour
SESSID	Expiration date 1 day
__hssc	Expiration date 1 hour
__cf_bm	Expiration date 1 hour
intercom-id-iojaybix	Expiration date 270 days
intercom-session-iojaybix	Expiration date 6 days
xtbCookiesSettings	Expiration date 364 days
xtbLanguageSettings	Expiration date 364 days
TS5b68a4e1027
countryIsoCode
userPreviousBranchSymbol	Expiration date 364 days
_cfuvid
intercom-device-id-iojaybix	Expiration date 270 days
__cfruid
UserMatchHistory	Expiration date 29 days

Cookie name	Description
_gid	Expiration date 1 day
_gat_UA-22576382-1	Expiration date 1 hour
_gat_UA-121192761-1	Expiration date 1 hour
_ga_CBPL72L2EC	Expiration date 729 days
_ga	Expiration date 729 days
AnalyticsSyncHistory	Expiration date 29 days
af_id	Expiration date 394 days
afUserId	Expiration date 729 days
AF_SYNC	Expiration date 6 days
__hstc	Expiration date 179 days
__hssrc
_vwo_uuid_v2	Expiration date 365 days
_ga_TC79BEJ20L	Expiration date 729 days
_vwo_uuid	Expiration date 365 days
_vwo_ds	Expiration date 29 days
_vwo_sn	Expiration date 1 hour
_vis_opt_s	Expiration date 99 days
_vis_opt_test_cookie
_gcl_au	Expiration date 89 days

Cookie name	Description
MUID	Expiration date 389 days
_omappvp	Expiration date 3998 days
_omappvs	Expiration date 1 hour
_uetsid	Expiration date 1 day
_uetvid	Expiration date 389 days
_fbp	Expiration date 89 days
fr	Expiration date 89 days
muc_ads	Expiration date 729 days
lang
_ttp	Expiration date 389 days
_tt_enable_cookie	Expiration date 389 days
hubspotutk	Expiration date 179 days
YSC
VISITOR_INFO1_LIVE	Expiration date 179 days
li_sugr	Expiration date 89 days
guest_id_marketing	Expiration date 729 days
guest_id_ads	Expiration date 729 days
guest_id	Expiration date 729 days
MSPTC	Expiration date 389 days
IDE	Expiration date 389 days
VISITOR_PRIVACY_METADATA	Expiration date 179 days

Cookie name	Description
personalization_id	Expiration date 729 days
UserMatchHistory	Expiration date 29 days
bcookie	Expiration date 364 days
lidc	Expiration date 1 day
lang
bscookie	Expiration date 364 days
li_gc	Expiration date 179 days

How can we help you?

Changing the 2FA Authentication Method

To change your 2FA authentication method from SMS to TOTP (authenticator app) in the mobile application:

How can we help you?

Changing the 2FA Authentication Method

To change your 2FA authentication method from SMS to TOTP (authenticator app) in the mobile application:

Related articles

Complaints

Two-Factor Authentication (2FA)

What is the Client office for?