Two-step verification for signing in to the Xfinity website and app

Xfinity offers two-step verification to give an extra layer of security and an easier sign-in experience. You can download it on Apple and Android phones.

The Xfinity app tells you when someone tries to use your Xfinity ID and password to sign in to your account either online or using the Xfinity app. You can approve or deny the sign-in with a yes/no button, facial recognition, one-touch fingerprint ID, or a verification code.

Set up two-step verification in the Xfinity app

1. Open the Xfinity app.
2. Tap Account settings at the bottom of the screen.
3. Tap Account settings.
4. Choose Xfinity ID and security.
5. Tap Two-step verification.
   
6. You will need both an email and mobile number on your account to turn on two-step verification.
   • If one or both are missing, you’ll be asked to add and verify them.
     • Note: The email address you use can’t be an Xfinity email address.
       
7. Once your email and phone number are verified, choose Turn on.
   
   • If your device has biometrics on, you will be asked to add another layer of security, like facial recognition or a fingerprint, whenever signing in to your Xfinity account.
     • Note: This is optional. You can choose to use this feature or the traditional ways.
       
8. You will be asked to verify your identity before activation. You can choose one of two ways:
   • Tap the notification in the Xfinity app.
   • Enter a code sent through email or text.
9. Two-step verification is now on. Whenever a sign-in to your Xfinity account is made from a new device or after a period of inactivity, you’ll be told. You can then confirm or deny the sign-in.
   
   • • Note: After you turn on two-step verification, you’ll be able to check a box for Don’t ask again in this browser. If you check this box, you won’t be asked to sign in as often when you use the app.
       

Verification methods

The Xfinity app offers four ways to confirm it’s you when using two-step verification:

• Yes/no push notifications (in-app or in the notifications bar)
• Biometric scanning (facial or fingerprint)
• Traditional text message or email codes
• A code generator in the app

Note: If you want to use yes/no push notifications or biometrics, you must turn on notifications. If you don't, you’ll need to use one-time code sent by text message or email, or the code generator app.

Push notifications

The default method for two-step verification is push notifications.

When someone tries to sign in to your account online or in the app, a notification will show on any registered device. It will ask you to verify the login. If you don’t know who tried signing in, choose No, deny. You should change your password right away to keep your account safe.

While using the app, you can also verify the sign-in or clear away the sign-in request.

Biometrics

If your device supports biometric scanning, you can use fingerprint ID or facial recognition as an extra layer of safety. You’ll be asked if you want to use this and push notifications when setting up two-step verification.

Text message or email code

If you don’t turn on push notifications or biometric scanning, your device will use a code sent through text message or email. You’ll be asked to enter it when you sign in to your account online or in the app. The code expires in 15 minutes.

Code generator

You can also use the code generator in the app. This will generate a random code that you’ll be asked to enter when you sign in to your account online or in the app. You can find this under Code generator on the two-step verification screen.

Set up multiple devices

You can have up to five registered devices that get push notifications to approve sign-in requests. To register a new device, follow the steps in the first section of this article. Go to the two-step verification page. Then, tap Register this device.

Note: All registered devices will get push notifications to confirm sign-in requests. Once registered, you can add or change your devices and their settings from the two-step verification screen. The purple dot will show the device you’re using.

Set-up two-step verification on the Xfinity website

You need both an email and a mobile phone number saved in your account to turn on two-step verification. If one or both are missing, you’ll be asked to add and verify them.

You can also turn on or off two-step verification on the Xfinity website using the steps below. 

1. Go to the Settings page on the website.
2. Choose Xfinity ID and Security.
3. Choose Two-step verification in the Security section. 
4. Verify your identity by sending a code through email or text.
5. Choose Turn on after entering the code.
6. You successfully turned on two-step verification.
   • When someone tries to sign into your account from a new device or after a period of time, you’ll be notified. You can then confirm or deny the sign-in.