Help center

To change your 2FA authentication method from SMS to TOTP (authenticator app) in the mobile application:

Tap the profile icon in the top-left corner.
Go to Security → Two-Factor Authentication.
Select Authenticator App and follow the on-screen instructions.
You will be prompted to download an authenticator app (e.g., Google Authenticator or Microsoft Authenticator) from your app store, then either copy the key or scan the QR code.
Enter the generated 6-digit code from your authenticator app into the XTB app to confirm the change.
Before completing the process, backup codes will be displayed. These codes can be used if you encounter login issues. Each backup code can be used only once, so make sure to save and store them in a secure place.

Important: Remember that the above change of authentication method is only possible if you have current access to your account - i.e. your current phone number in the system is correct and you can easily receive SMS messages to it necessary to authorize the process.

If you don't have access to your account (e.g., due to a phone number change) or are having general difficulties logging in (not receiving SMS codes), the above self-configuration won't be possible. In such a situation, please contact our customer service immediately to verify and update your details

Cookie name	Description
SERVERID
userBranchSymbol	Expiration date 1 day
test_cookie	Expiration date 1 hour
adobe_unique_id	Expiration date 364 days
__hssc	Expiration date 1 hour
SESSID	Expiration date 1 day
__cf_bm	Expiration date 1 hour
intercom-id-iojaybix	Expiration date 270 days
intercom-session-iojaybix	Expiration date 6 days
xtbCookiesSettings	Expiration date 364 days
TS5b68a4e1027
countryIsoCode
xtbLanguageSettings	Expiration date 364 days
userPreviousBranchSymbol	Expiration date 364 days
intercom-device-id-iojaybix	Expiration date 270 days
__cfruid
_cfuvid

Cookie name	Description
_gid	Expiration date 1 day
_gat_UA-98728395-1	Expiration date 1 hour
_gat_UA-121192761-1	Expiration date 1 hour
_gcl_au	Expiration date 89 days
_ga_CBPL72L2EC	Expiration date 729 days
_ga	Expiration date 729 days
__hstc	Expiration date 179 days
__hssrc
_vwo_uuid_v2	Expiration date 365 days
_ga_TC79BEJ20L	Expiration date 729 days
_vwo_uuid	Expiration date 365 days
_vwo_ds	Expiration date 29 days
_vwo_sn	Expiration date 1 hour
_vis_opt_s	Expiration date 99 days
_vis_opt_test_cookie
af_id	Expiration date 394 days
afUserId	Expiration date 730 days
AF_SYNC	Expiration date 6 days
AnalyticsSyncHistory	Expiration date 29 days

Cookie name	Description
MUID	Expiration date 389 days
_omappvp	Expiration date 3998 days
_omappvs	Expiration date 1 hour
_uetsid	Expiration date 1 day
_uetvid	Expiration date 389 days
_fbp	Expiration date 89 days
fr	Expiration date 89 days
_ttp	Expiration date 89 days
_tt_enable_cookie	Expiration date 89 days
hubspotutk	Expiration date 179 days
IDE	Expiration date 389 days
YSC
VISITOR_INFO1_LIVE	Expiration date 179 days
li_sugr	Expiration date 89 days
guest_id_marketing	Expiration date 729 days
guest_id_ads	Expiration date 729 days
guest_id	Expiration date 729 days
muc_ads	Expiration date 729 days
VISITOR_PRIVACY_METADATA	Expiration date 179 days
MSPTC	Expiration date 389 days

Cookie name	Description
bcookie	Expiration date 364 days
lidc	Expiration date 1 day
UserMatchHistory	Expiration date 29 days
bscookie	Expiration date 364 days
li_gc	Expiration date 179 days
personalization_id	Expiration date 729 days

How can we help you?

Changing the 2FA Authentication Method

How can we help you?

Changing the 2FA Authentication Method

Related articles

What is the Client office for?

Emergency Lock – Additional Protection for Your Account

Two-Factor Authentication (2FA)