# How to set up Amazon two-step verification

> Set up Amazon two-step verification in a Merca store window, scan the QR code, and copy saved TOTP codes for later sign-ins without a phone.

Source: https://merca.getchrovia.com/en/docs/amazon-totp

First add the Amazon store: [How to add a store](https://merca.getchrovia.com/en/docs/add-store). Then click **Launch** in the desktop app. Set up two-step verification in that store's browser window. Don't scan this QR with a phone app or another browser. Launch the store in the desktop app.

## Open Login & Security

After you sign in to Amazon, open **Login & Security**. On the **2-step verification** row, click **Turn on**.

![Two-step verification on Login & Security](https://merca.getchrovia.com/docs/screenshots/amazon-totp-security.webp)

## Add an authenticator app

On **Two-Step Verification (2SV) Settings**, click **Add new phone or Authenticator App**.

![Add an authenticator app](https://merca.getchrovia.com/docs/screenshots/amazon-totp-add.webp)

On the next page, choose **Use an authenticator app**, not **Use your mobile number**. A QR code appears.

## Scan the page QR

Click the extension icon at the top right, open **Authenticator**, then click **Scan QR code**.

![Scan QR code](https://merca.getchrovia.com/docs/screenshots/amazon-totp-scan.webp)

When the scan succeeds, a 6-digit code appears in the extension.

![6-digit code after a successful scan](https://merca.getchrovia.com/docs/screenshots/amazon-totp-code.webp)

## Paste it back into Amazon

Click **Copy**, paste the code into step 3, then click **Verify OTP and continue**.

![Copy the code and paste it into step 3](https://merca.getchrovia.com/docs/screenshots/amazon-totp-paste.webp)

## Check the store

Go back to the desktop app, open **My stores**, and click **Authenticator** on that store.

![Authenticator on the store](https://merca.getchrovia.com/docs/screenshots/amazon-totp-button.webp)

The authenticator appears in the list, with the current 6-digit code. If the list is empty, click **Refresh**.

![Authenticator saved for the store](https://merca.getchrovia.com/docs/screenshots/amazon-totp-saved.webp)

The authenticator stays with this store. Later, when Amazon asks for a code, click **Copy** on this store's **Authenticator** page, or **Copy** in the store window extension. You don't scan the QR again, and you don't need your phone. Another store or another browser will not have this authenticator. See [Store TOTP and passkeys: storage and access](https://merca.getchrovia.com/en/docs/credential-privacy).