2FA methods supported by Amazon Web Services
Adding two-factor authentication is one of the most effective ways to protect your Amazon Web Services account. With TOTP support, you can generate Amazon Web Services verification codes directly in the Authenticator App.
Authenticator app (TOTP)
Amazon Web Services lets you use time-based one-time passwords, so you can generate verification codes in an authenticator app on your device — no network or SMS needed.
Hardware token
Amazon Web Services supports a dedicated hardware token for generating codes.
Security key (U2F)
Amazon Web Services works with hardware security keys using the U2F/FIDO standard.
Amazon Web Services 2FA — Frequently asked questions
Does Amazon Web Services support an authenticator app?
Yes. Amazon Web Services supports time-based one-time passwords (TOTP), so you can add it to the Authenticator App and generate verification codes right on your device.
Which two-factor authentication methods does Amazon Web Services support?
Amazon Web Services currently supports: Authenticator app (TOTP), Hardware token, Security key (U2F).
Is it free to generate Amazon Web Services codes with the Authenticator App?
Yes. The Authenticator App is free to download, and generating Amazon Web Services verification codes does not require an account or sign-up.
This page is for educational purposes only. We are not affiliated with or endorsed by Amazon Web Services. All trademarks and product names are the property of their respective owners and are used solely for identification.