Two Factor Authentication is the second key we put on your pokerboya login. Turn it on once and every sign-in from a new device asks for a fresh...
Two Factor Authentication, or 2FA, pairs your password with a short code generated on your phone. We built ours around Google Authenticator, Authy and SMS for Indonesia numbers, with email as a backup channel. When you sign in from a new browser or a friend's phone, pokerboya pauses the session and asks for that code. Your password alone won't open the lobby,
and your linked OVO or GoPay wallet stays untouched until the second factor clears.
Scan the QR we show in your security panel with Google Authenticator or Authy. The app then rolls a fresh six-digit code every thirty seconds, tied only to your pokerboya account.
Prefer a text? We send the code straight to your Indonesian mobile number. Works on any handset, no extra app needed, and the message lands within a few seconds of your sign-in attempt.
During setup we hand you ten one-time recovery codes. Save them somewhere offline. If you lose your phone, any unused code from that list lets you back into your pokerboya account.
pokerboya is designed as a fast, mobile-first gaming information hub with clear local payment context and safer access notes.
— pokerboya platform teamSign in, tap your avatar in the chip row, and choose Security. The Two Factor Authentication switch sits at the top — toggle it and we'll show your method choices straight away.
Choose authenticator app, SMS to your Indonesian number, or email. We recommend the app for speed, but SMS works well if you switch handsets often or travel between provinces.
Enter the six digits we generate or send. Once verified, 2FA is live on your pokerboya account and every fresh device login from that point will request the second factor.
The whole pairing screen scales to phone width. Scan the QR with the same device by long-pressing the image, or use a second phone — both paths finish the setup in seconds.
| Type | Account security layer, applied at login and at sensitive actions like withdrawal requests or password changes. |
|---|---|
| Strength | Time-based one-time passwords (TOTP) on a 30-second cycle, plus SMS and email fallbacks for redundancy. |
| Supported devices | Any iOS or Android phone with an authenticator app, plus standard SMS handsets on Indonesia carriers like Telkomsel, XL and Indosat. |
| Access region | Available to all pokerboya accounts in supported regions where local law permits, with no extra fee for activation. |
Most of you sign in from a phone, so we tuned the Two Factor Authentication flow for that screen first. The QR pairing image sizes itself to your handset, the...
We use the open RFC 6238 TOTP standard, the same one banks and large platforms rely on, so any authenticator app you trust will work with pokerboya.
The secret seed behind your codes is stored encrypted on our side and never sent in plain text after the initial QR pairing on your screen.
Every successful 2FA sign-in triggers an email to the address on file, so you'll spot any session you didn't start within seconds of it happening.
Cashing out to DANA, OVO, GoPay or QRIS triggers a fresh 2FA prompt, even on a trusted device, keeping your money path double-locked.
Your security panel shows the last ten 2FA events with device, time and city, so you can spot anything that doesn't match your own activity.
Indonesian-speaking agents handle 2FA recovery around the clock, with identity checks that protect you from anyone trying to social-engineer their way in.
A single password is one leak away from exposure. Two Factor Authentication adds a moving code, so even a stolen password won't open your pokerboya lobby.
Email checks confirm new sign-ups but don't block live logins. 2FA runs at every fresh-device login, catching threats in real time.
SMS works, but SIM-swap attacks exist. Pairing an authenticator app on top gives you a code that never leaves your phone.
Face or fingerprint unlocks your handset, not your pokerboya account. 2FA sits on the account itself, so a borrowed phone still asks for the code.
Marking a device as trusted skips 2FA on that browser only. New phones, new laptops and incognito tabs still trigger the second factor.
A withdrawal PIN guards the cashier alone. 2FA covers login, password change, email change and cashier — a wider net around your account.
Auto-logout protects idle sessions. 2FA protects the moment you sign back in, and the two work together rather than replacing each other.
No charge to switch on 2FA, ever. It's part of every pokerboya account in supported regions.
Mix authenticator app, SMS and email so you're never locked out by one channel failing on a given day.
Setup takes under a minute from the security panel — scan, enter, save your recovery codes, done.
Re-prompts when you link or unlink DANA, OVO, GoPay or QRIS, so payment changes always need fresh approval.
SMS routing optimised for Telkomsel, XL, Indosat and Smartfren, with codes landing in seconds across the archipelago.
Once a device is trusted, daily sign-ins skip the prompt. New devices and risky actions still trigger the check.