Protect and recover your account
Set up two-factor authentication, review signed-in devices, and use the right recovery path.
Start in Settings → Security. Your Roblox sign-in, verified email, and Bloxstack two-factor authentication protect different parts of the account.
Set up two-factor authentication
Choose Set up 2FA and follow the authenticator setup. Save the recovery codes somewhere you can access if you lose your phone. Keep them private.
At sign-in, enter the code from your authenticator. If you cannot use it, choose Lost your authenticator? Use a recovery code. Each saved recovery code works once.
Do not send a password, authenticator code, or recovery code to another member or to support.
Review signed-in devices
Open Privacy & safety and check Signed-in devices. Sign out an unfamiliar device individually, or choose Sign out others to keep only your current session.
The device list may ask for a fresh Roblox confirmation before showing sensitive information. Complete that step if the list is unavailable because your sign-in is old.
Recover access
If you cannot access the Roblox account used to sign in, recover that account through Roblox first. Bloxstack does not have a separate password or Google sign-in you can use to bypass it.
If you can access Roblox but cannot finish Bloxstack's two-factor step, use a saved recovery code. If neither option works, open account recovery or contact support. Include your Bloxstack handle and a description of where the process stops.
Download or remove your data
Privacy & safety also lets you prepare a data download. The link requires the same signed-in account, works once, and expires after one hour. The export includes account and authored records; it excludes uploaded file bytes and other people's private content.
You can request removal of specific information or delete your account. Deletion cannot be undone. Payment, shared Studio, or other retained records may require support review, which the deletion flow explains before it proceeds.