gloo in your Start — Mobile and.
gloo Two-Factor Authentication Account Security
Mobile payment adoption across Southeast Asia has expanded rapidly, with DANA, e-wallet, mobile banking, and local payment now serving millions of daily transactions. As digital wallets become primary funding channels, account security—particularly protecting access to your gloo balance and linked payment methods—has become essential. We offer Two-Factor Authentication (2FA) as a standard protective layer on gloo, letting you verify login attempts from new devices or unusual locations before access is granted.
Open an account
Two-Factor Authentication
- Category
- Live Table / Card
- RTP
Two-Factor Authentication on gloo works by requiring a second verification step after you enter your password. You receive a time-based code via your registered phone number or authenticator app, then submit it to complete login. This prevents unauthorized account takeovers even if someone obtains your password, because they cannot access your 2FA method without physical possession of your phone or authenticator device.
What Is Two-Factor Authentication on gloo?
Two-Factor Authentication (2FA) is a security feature that requires two separate proofs of identity to access your gloo account. The first factor is your password—something you know. The second factor is either a code sent to your phone or a code generated by an authenticator app—something only you possess.
On gloo, when 2FA is active, the login flow changes: you enter your email and password as usual, but instead of immediate access, our system sends a verification code to your registered phone number via SMS or displays a prompt to scan a QR code with an authenticator app. You enter that code on the next screen, and only then does gloo grant access to your account. This additional step takes 10–15 seconds but blocks nearly all unauthorized access attempts.
Two-Factor Authentication is optional on gloo but highly recommended, especially if you link payment methods like DANA, e-wallet, mobile banking, or bank accounts (local payment, online payment, e-wallet, mobile banking). The small friction of entering a code on each login is far outweighed by the protection it offers against account compromise.
Key takeaways
- 2FA requires a second verification step—an SMS code or authenticator app code—in addition to your password
- On gloo, SMS codes are valid for subject to verification; authenticator codes refresh every 30 seconds
- Two-Factor Authentication protects both login access and prevents unauthorized payment method changes on your gloo account
- Backup codes are generated when you enable 2FA on gloo; store these in a safe place for account recovery if you lose phone access
How to Enable Two-Factor Authentication on gloo
Enabling 2FA on gloo takes five to ten minutes and requires access to your phone. Follow these steps:
- Log into your gloo account. Open the gloo app or visit the web platform and enter your email and password.
- Navigate to Security Settings. In your account menu, select "Account Settings," then "Security & Login," then "Two-Factor Authentication."
- Choose your 2FA method. gloo offers two options: SMS (code sent to your phone number) or Authenticator App (a code generated by an app like Google Authenticator, Microsoft Authenticator, or Authy).
- Verify your phone number (SMS method). If you choose SMS, gloo sends a test code to your registered phone number. Enter this code on the next screen to confirm.
- Scan QR code (Authenticator App method). If you choose an authenticator app, open your app of choice, select "Add Account," and scan the QR code gloo displays. The app generates a six-digit code; enter it on gloo to confirm setup.
- Save backup codes. gloo generates 10 backup codes. Copy these to a safe location (password manager, locked note, or physical paper kept secure). Use backup codes only if you lose access to your phone or authenticator app.
- Confirm activation. gloo asks you to log out and log back in to verify 2FA is working. After re-login, you should see a 2FA prompt with a code field.
Authenticator app method is generally preferred on gloo because it does not depend on SMS delivery, which can be delayed during peak times (Liga 1 finals, Piala AFF tournaments) or in regions with spotty mobile coverage. SMS is simpler but less reliable during high-volume periods.
- SMS code validity
- On gloo, SMS codes expire after subject to verification. If you do not submit within this window, request a new code.
- Authenticator code refresh
- Time-based codes (TOTP) generated by authenticator apps refresh every 30 seconds on gloo. You can enter a code from the last 30 seconds or the next 30 seconds, providing a grace window.
- Backup code use
- Each backup code on gloo is single-use. After you use one, mark it as consumed or delete it from your list to avoid confusion.
Advantages of 2FA on gloo
- Blocks unauthorized login even if password is compromised
- Prevents unauthorized changes to linked payment methods (DANA, e-wallet, etc.)
- Free to enable and maintain on gloo; no additional fees
- Backup codes allow account recovery if you lose phone access
Considerations & limitations
- Requires entry of a code at each login; adds 10–15 seconds
- If you lose your phone, 2FA access is blocked until you use a backup code or contact gloo support
- SMS codes depend on mobile network coverage; authenticator apps do not
Best Practices & Troubleshooting for gloo Two-Factor Authentication
Store backup codes securely. When you enable 2FA on gloo, we generate 10 backup codes. These are one-time use codes that let you log in if your phone is lost or stolen. Keep them in a password manager (like Bitwarden or 1Password), or write them on paper and lock them in a safe place. Never share them or store them on your computer's desktop.
Use authenticator app over SMS. Time-based codes from apps like Google Authenticator or Microsoft Authenticator are more reliable than SMS, especially during high-traffic periods on gloo (weekend sports betting, Idul Fitri holidays, Liga 1 finals). Authenticator apps work offline and do not depend on mobile signal or SMS delivery delays.
Set a strong, unique password. Two-Factor Authentication on gloo is most effective when paired with a strong password. Use a mix of uppercase, lowercase, numbers, and symbols. Avoid reusing passwords across multiple sites; if another service is compromised, attackers cannot use the same credentials on gloo.
Verify linked payment methods are protected. When 2FA is active on gloo, any attempt to add or change a linked payment method (DANA, e-wallet, mobile banking, local payment, bank account) will trigger a 2FA prompt. This prevents someone with your password from redirecting withdrawals to their own account. Treat this as a safety checkpoint during every payment-related action.
What if I lost my phone? If your registered phone is lost or stolen, use one of your backup codes to log into gloo. After login, go to Security Settings and disable the old 2FA method, then re-enable 2FA with a new phone or device. If you have no backup codes and cannot access your registered phone, contact gloo support with proof of account ownership (email verification, identity document). Our team will help you regain access; this process typically takes 24–48 hours during business days.
Syncing authenticator apps across devices. If you use an authenticator app on gloo (like Google Authenticator) and want to add a second phone, you will need to scan the original QR code again on your new device. gloo does not automatically sync authenticator codes between phones, so have your backup codes ready in case you need to switch devices during travel to Semarang, Jakarta, Bandung, or other regions.
Withdrawal security with 2FA active. When you request a withdrawal on gloo (to online payment, e-wallet, mobile banking, local payment, or bank account), our system may ask for an additional 2FA verification to confirm the withdrawal destination. This extra step prevents unauthorized fund transfers. If you have linked your account to multiple payment methods, 2FA ensures that only you can specify which method receives your winnings.
Disabling 2FA if needed. If you decide to disable Two-Factor Authentication on gloo, visit Security Settings and toggle off the 2FA option. You will be asked to provide your password and a current 2FA code as final confirmation, ensuring that only the account owner can disable this protection.
Two-Factor Authentication is a simple, free layer of protection for your gloo account and linked payment methods. We recommend enabling it, especially if you maintain a regular deposit and withdrawal routine. The minimal inconvenience of entering a code at login is far outweighed by the security benefit during high-activity periods like Piala Indonesia tournaments or Imlek celebrations when account takeover attempts increase across all gaming platforms in the region.