When a site turns on two-factor authentication it shows a QR code. Scanning it copies the secret into DroidPass without typing.
Why this matters
The QR code carries the secret the codes are generated from. Scanning copies it exactly; typing it by hand is where a stray character turns into codes that are always rejected.
Steps
On the website, choose to set up an authenticator app. It shows a QR code.
In DroidPass, open the side menu, tap Authenticator, then Add Authenticator.
Tap Scan QR code and allow camera access if asked.
Point the camera at the code. The name and secret fill in automatically.
Save, then type the current six-digit code back into the website to confirm.
If it does not work
Camera access is needed to scan QR codes. Enable it in Settings, or enter the key manually.
This isn't a valid 2FA secret. It can only contain letters A to Z and the digits 2 to 7.
Good to know
If the QR code is on the same phone, use the site’s "can’t scan" option and copy the setup key instead.
The website will not trust the setup until you enter one code back into it.