# Set up a 2FA Protected or 2-of-3 account Source URL: https://help.blockstream.com/blockstream-app/manage-2fa-accounts/set-up-a-2fa-protected-or-2-of-3-account Updated: 2026-10-12T12:44:46.000Z Category: Blockstream App Section: Manage 2FA Accounts --- A 2FA Protected account (2-of-2) adds Blockstream as a co-signer behind two-factor authentication (2FA), so a stolen recovery phrase cannot spend your funds on its own. A 2-of-3 account adds a recovery key you control on top of that, so you can spend without Blockstream at any time. This guide covers adding either account to an existing wallet in the Blockstream mobile app and turning on 2FA. For how the two account types protect you and how they compare, see [How does multisig protect your wallet in the Blockstream app?](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/how-does-multisig-protect-your-wallet-in-the-blockstream-app) - [Add a 2FA Protected Account](#add-a-2fa-protected-account) - [Add a 2-of-3 Account](#add-a-2-of-3-account) - [Enable Two-Factor Authentication](#enable-two-factor-authentication) - [Set the 2FA Threshold and Expiry](#set-the-2fa-threshold-and-expiry) > **Note:** 2-of-3 accounts are available for Bitcoin only. Liquid supports the 2FA Protected type. ## Add a 2FA Protected Account ![Steps to add a 2FA Protected account in the Blockstream app: tap Settings, tap Create Account, check the asset, tap 2FA Protected](/_next/image?url=https%3A%2F%2Fstorage.googleapis.com%2Fdxp-production-assets%2Fcontent%2Fset-up-2fa-protected-or-2of3-account-1.png&w=1920&q=75) 1. Tap **Settings** in the bottom navigation. 2. Under **Account Settings**, tap **Create Account**. 3. On the **Create New Account** screen, check that **Asset** shows the asset you want the account for. To change it, tap the pencil icon and choose Bitcoin or Liquid Bitcoin. 4. Under **Security Policy**, tap **2FA Protected**. The account is created and appears in your wallet. Continue to [Enable Two-Factor Authentication](#enable-two-factor-authentication) so the second key is protected by a 2FA method. ## Add a 2-of-3 Account ![Steps to add a 2-of-3 account in the Blockstream app: tap Create Account, check the asset, tap 2of3 with 2FA, select your recovery key](/_next/image?url=https%3A%2F%2Fstorage.googleapis.com%2Fdxp-production-assets%2Fcontent%2Fset-up-2fa-protected-or-2of3-account-2.png&w=1920&q=75) 1. Tap **Settings** in the bottom navigation, then tap **Create Account** under **Account Settings**. 2. On the **Create New Account** screen, check that **Asset** shows Bitcoin. 3. Under **Security Policy**, tap **2of3 with 2FA**. 4. On the **Select your recovery key** screen, choose how to supply your third key: - **New recovery phrase:** the app generates a recovery phrase for the third key. Choose the **Recovery phrase length** (12 or 24 words), tap **Show Recovery Phrase**, write the words down in order, and tap **Continue**. Pass the **Recovery Phrase Check** by entering the words the app asks for. - **Existing recovery phrase:** enter a recovery phrase you already hold. Use one that is not the recovery phrase of this wallet. - **Use a public key:** enter the xpub of a key you control on the **Enter your xpub** screen, then tap **Continue**. The private key never enters the app. The account is created and appears in your wallet. Store the third key separately from your main recovery phrase. With your main recovery phrase and the third key together, you can spend from this account without Blockstream and without 2FA. > **Warning:** If you lose the third key, this account behaves like a 2FA Protected account: losing every 2FA method as well means a 12-month reset before you can spend. ## Enable Two-Factor Authentication Both account types use Blockstream's key as a co-signer. Until you turn on at least one 2FA method, that key signs automatically and the account gives you no extra protection. ![Steps to enable two-factor authentication in the Blockstream app: tap Two-Factor Authentication, toggle a 2FA method](/_next/image?url=https%3A%2F%2Fstorage.googleapis.com%2Fdxp-production-assets%2Fcontent%2Fset-up-2fa-protected-or-2of3-account-3.png&w=1920&q=75) 1. Tap **Settings** in the bottom navigation, then tap **Two-Factor Authentication** under **Account Settings**. 2. Under **2FA Methods**, choose **Mainnet** or **Liquid**, then tap the toggle next to the method you want to enable: email, SMS, call, or authenticator app. The app prompts you for a code to confirm. Enable at least two methods. If you lose one, the other lets you change it without a reset. For the full walkthrough, see [Update 2FA method](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/update-2fa-method). ## Set the 2FA Threshold and Expiry Two optional settings shape how a 2FA Protected account behaves day to day. Both live under **Settings** \> **Two-Factor Authentication**. - **2FA Threshold:** tap **Two-Factor threshold** and enter an amount. Payments below it go through without a 2FA code. - **2FA Expiry:** under **2FA Expiry**, choose **6 months (25920 blocks)**, **12 months (51840 blocks)**, or **15 months (65535 blocks)**. This is the timelock after which funds that have not moved can be spent with your key alone, without 2FA. The app prompts you to redeposit funds approaching expiry so they stay protected. See [Perform a redeposit](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/perform-a-redeposit). 2-of-3 accounts have no expiry, since your third key already lets you spend without Blockstream. Your multisig account is set up. Funds you receive on it now need your key plus a 2FA code, or, for 2-of-3, your key plus your third key, before they can leave the wallet. Navigation: Blockstream Help Center > Blockstream App > Set up a 2FA Protected or 2-of-3 account ## Related Articles in This Section - [Update 2FA method](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/update-2fa-method) - [2FA Multisig protection explained](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/2fa-multisig-protection-explained) - [Perform a redeposit](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/perform-a-redeposit) - [Cancel 2FA reset](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/cancel-2fa-reset) - [Set up watch-only for 2FA accounts](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/set-up-watch-only-for-2fa-accounts) - [Request to have Personal Identifiable Information deleted](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/request-to-have-personal-identifiable-information-deleted) - [The upgrade from nLockTime to CheckSequenceVerify](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/the-upgrade-from-nlocktime-to-checksequenceverify) - [How do nLockTime timelocks work?](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/how-do-nlocktime-timelocks-work) - [How does multisig protect your wallet in the Blockstream app?](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/how-does-multisig-protect-your-wallet-in-the-blockstream-app) - [Set up a 2FA Protected or 2-of-3 account](https://help.blockstream.com/blockstream-app/manage-2fa-accounts/set-up-a-2fa-protected-or-2-of-3-account) (current)