Who this guide is for
US adults who already have — or are about to open — a Polymarket US account and need to turn on two-factor authentication before they deposit. This is not how to sign up, not how to complete KYC, not how to deposit, not how to withdraw, and not how to use Polymarket on mobile. Those pages are the account open, the ID file, the on-ramp, the off-ramp, and the official phone path. This page is only the extra login factor on the US desk. Polymarket is the only live outbound here.
Why 2FA belongs before the first deposit
Official Protect Your Account is the security page. Official Is my money safe? is why you do this before debit, ACH, or wire — not after a funded balance is already sitting. Funding itself is How to deposit on Polymarket (US).
A funded account is a target — lock it before you send money
Official “Is my money safe?”
Official US “Is my money safe?”: customer funds sit in a dedicated account separate from Polymarket US operating funds, and Polymarket US cannot use that money. The same page says if you lose your credentials — or someone else gains access — you can lose access to your funds. Debit, ACH, and wire are later steps. Turning on 2FA first is how you stop a stolen Google or Apple login from becoming a funded desk you no longer control.
Google / Apple sign-in is not the second factor on Polymarket
Official Protect Your Account
Official Protect Your Account: your Polymarket login is linked to your Google account or Apple ID, and you should keep that primary login secure. The same help set still tells you to enable 2FA on the Polymarket US account itself. Those are two locks. We will not treat phone-level Google or Apple 2FA as a substitute those pages do not call a substitute.
Support will not ask for your codes — neither will this site
Official Protect Your Account
Official Protect Your Account: do not share Polymarket verification codes with anyone, including support. Official help also says to sign in only through the official Polymarket app and to avoid fake Google or Apple login screens. If a chat, email, or “bonus” page asks for a 6-digit code or a backup code, that is not a funding step. Stop.
Official US help · lock the login · then fund · never share a code
Where the security settings live
Hard rule: if official US help names a screen, we name it. If a label is not on those pages, we describe the action and tell you to follow the live Settings / Security control. Official What is Polymarket US? is the fiat desk this lock belongs to.
Account settings, then Two-Factor Authentication
Official US 2FA help
Official US Two-Factor Authentication help: go to your account settings and select Two-Factor Authentication. That is the control those pages name. Official contact help also puts in-app chat inside account settings. We could not confirm a published Profile-icon → Security click path on the US pages we checked — we will not invent one. If the live app labels the same action Settings, Security, or 2FA, use the live label.
US app — not polymarket.com
Official Website vs App
Official Website vs App and Official What is Polymarket US?: US residents use the Polymarket US app on the CFTC-regulated fiat desk. The international website is a different product with a different login. Do not hunt for 2FA on a browser tab pointed at the international site and assume that lock covers the US account you are about to fund.
This is not KYC, and it is not a deposit rail
A different control
Identity verification is How to complete Polymarket KYC. Funding is How to deposit on Polymarket. Those pages are the ID file and the cashier. This page is only the extra login factor. Official US docs still require KYC before you can deposit or trade — 2FA does not skip that gate, and KYC does not replace 2FA.
Official US 2FA help · account settings → Two-Factor Authentication · confirm live labels
Authenticator vs SMS — only what official help names
Official Two-Factor Authentication help is the method list we will reprint. We do not add a second rail those pages do not print, and we do not name an authenticator brand.
Authenticator app — the method official US 2FA help names
Named on official US 2FA help
Official US Two-Factor Authentication help: select the authenticator-app option, scan the QR code with that app, then enter the 6-digit code the app generates to finish setup. That is the method those pages print. They do not name a vendor. We will not invent Google Authenticator, Authy, or any other brand. Use whatever authenticator the live Settings / Security screen accepts.
SMS — not named as a 2FA method on the US pages we checked
Not on official US 2FA help
Official US Two-Factor Authentication help says “select the authenticator app option.” It does not name SMS, a texted one-time code, or a phone-number 2FA rail. Bank-link or KYC texts are a different product step and are not this lock. If the live Settings / Security screen shows another method, follow that label. We will not invent SMS as a documented Polymarket US 2FA rail.
Official US 2FA help · authenticator named · SMS not named · no invented vendor
Recovery basics — backup codes, not a vendor we invent
Official US 2FA help stops at backup codes. Official How do I contact support? is the next door if you cannot get in. We will not invent a recovery app, a reset URL, or a phone-carrier trick.
Save the backup codes the setup screen gives you
Official US 2FA help
Official US Two-Factor Authentication help: save your backup codes in a secure place. Those pages do not name a recovery-app vendor, a printed “recovery key” brand, or a cloud backup service. Write the codes down offline or store them in a password manager you already control. Do not screenshot them into an unlocked camera roll, and do not paste them into a chat.
If you lose the authenticator, use the codes — then support
Official contact help
Official US 2FA help does not publish a lost-phone walkthrough beyond those backup codes. Official How do I contact support?: in-app chat (from account settings) or support@polymarket.us. Include what you were trying to do and any error text. We will not invent a recovery vendor, a reset button, or a guarantee that support can bypass 2FA. Never give a backup code to anyone who claims to be support.
Official backup codes · support@polymarket.us · never share a code
The US 2FA sequence
-
Step 1
Confirm you are on the US (QCEX) app — and that your state is open
This lock is for the compliant US product, not the international crypto desk. Official Website vs App: US residents sign in and trade in the Polymarket US app. As of our June 2026 check Polymarket was reported unavailable in Arizona, Illinois, Massachusetts, Maryland, Michigan, Montana, Nevada and Ohio. Florida is a green-light state. Confirm the app lets you finish account setup before you send money. Age is 18+ with KYC — not the 21+ / 1-800-GAMBLER frame on our DFS pages.
-
Step 2
Open the US account through the live claim — then finish sign-up / KYC if you have not
Use the claim button on this page so you enter the compliant US on-ramp. That is the only live money CTA here. Official Create an Account: start with Google or Apple ID, then complete identity verification. Official US docs require KYC before you can deposit or trade. The click-by-click account open is How to sign up for Polymarket; the ID file is How to complete Polymarket KYC. This page does not reprint those walks.
-
Step 3
Open account settings and select Two-Factor Authentication — or the live Security label
Official US Two-Factor Authentication help: go to your account settings and select Two-Factor Authentication. Official Protect Your Account tells you to enable 2FA on the Polymarket US account. We could not confirm a published Profile → Security path beyond “account settings.” If the live app shows Settings, Security, or 2FA, use that control. Do not hunt for it on polymarket.com.
-
Step 4
Choose the authenticator-app option, scan the QR code, enter the 6-digit code
Official US Two-Factor Authentication help: select the authenticator-app option, scan the QR code with your authenticator app, then enter the 6-digit code it generates. Official US help does not name SMS as a 2FA method and does not name an authenticator vendor. If the live Settings / Security screen offers another method, follow that label — we will not invent one. Official Protect Your Account: never share that code, including with support.
-
Step 5
Save the backup codes, then deposit only after the second factor is on
Official US Two-Factor Authentication help: save your backup codes in a secure place. Official “Is my money safe?”: if someone else gains access to your credentials, you can lose access to your funds. That is why this page sits before How to deposit on Polymarket — debit, ACH, and wire wait until the lock is on. A publisher link is how this site is supported; it is not extra credit in your account. Event contracts can settle at zero. Nothing here is investment advice.
What official help does not print — so we will not either
Official US Two-Factor Authentication help names account settings, the authenticator-app option, a QR code, a 6-digit code, and backup codes. It does not print a Profile-icon path, an SMS 2FA rail, an authenticator brand, a recovery-app vendor, or a guaranteed support bypass. Official Protect Your Account on docs.polymarket.us is the credential page we can also confirm there: Google or Apple login, do not share codes, official app only, in-app chat.
If the live Settings / Security screen uses different words for the same action, follow the live screen. That is the rule this site uses when a control is not confirmable on public US help.
Blocked and contested states
Reported unavailable as of June 2026: Arizona, Illinois, Massachusetts, Maryland, Michigan, Montana, Nevada and Ohio. That list is not a promise it stays still — litigation around sports event contracts in particular can narrow or shift access. If you are in a listed state, do not fund on the assumption the desk is open. If you are in Florida or another green-light state, still confirm Settings / Security appears before you send money.
Age is 18+ with identity verification. That is a different gate from the 21+ / responsible-gambling frame on our DFS pages, because these are traded financial instruments. If you also want NFL DFS, start at the picks hub — those cashier rules do not carry over. Compare platforms on the prediction-markets hub.
What you will not get from this page
A dollar welcome match, a paste-this promo code, an SMS 2FA rail official US help does not name, an authenticator brand we invented, a recovery vendor, a cloned sign-up / KYC / deposit / withdraw / mobile walkthrough, or claim buttons for Kalshi, DraftKings, FanDuel, Underdog, Sleeper, PrizePicks, Hard Rock or BetRivers. We could not verify a standing official US welcome bonus on Polymarket’s own terms. Other publishers’ partner codes are theirs; we do not copy them. The honest user-facing line is still US access via CFTC-regulated QCEX — open account settings, turn on Two-Factor Authentication with the authenticator-app option official US help names, save the backup codes, follow the live Settings / Security labels if a control is not printed, and deposit only after that lock is on. Last verified August 8, 2026.
Related reading
US access via CFTC-regulated QCEX — confirm live sign-up terms in-app
CFTC-regulated US exchange (QCEX) · confirm live terms in-app
Affiliate link — we may earn a commission at no cost to you. 18+. Trading involves risk.
Frequently Asked Questions
Why should I turn on Polymarket 2FA before I deposit?
Where are the 2FA / security settings on Polymarket US?
Does Polymarket US 2FA use an authenticator app or SMS?
What if I lose my authenticator or my phone?
I already have 2FA on Google or Apple. Do I still need it on Polymarket?
Is turning on 2FA the same as KYC, sign-up, deposit, withdraw, or mobile setup?
Can I turn on Polymarket 2FA in every US state?
Is there a Polymarket 2FA bonus or promo code on this page?
Is this the same as locking a DFS or sportsbook account?
Advertising disclosure: Polymarket links are affiliate links — we may earn a commission at no cost to you, which never affects our ratings. Kalshi, DraftKings, FanDuel, Underdog, Sleeper, PrizePicks, Hard Rock and BetRivers have no live outbound claim on this page. Event contracts are CFTC-regulated financial products, not gambling. Trading involves risk and you can lose money, including your entire stake. Not investment advice. 18+. DFS pages on this site use a separate 21+ / 1-800-GAMBLER frame. Availability and terms can change — confirm current terms on Polymarket. Last verified August 8, 2026.