Accessing Account Management

You can configure two-factor authentication for iRacing in the Account Management site. In addition to accessing the Account Management site at https://oauth.iracing.com/accountmanagement/, links are provided in the other various iRacing applications. 


iRacing Web & iRacing UI

You can change your password by logging into the iRacing UI: (1) click your helmet at the top right of the screen, (2)

click Account, (3) click Manage Credentials and (4), click the Manage My Credentials button.



Then follow the steps in the Setting up two-factor Authentication section below.


Setting up Two-Factor Authentication

Account Management Site

Log in to iRacing Account Management at https://oauth.iracing.com/accountmanagement/.



Click on the Security section and then click on the Setup 2FA button.



Scan the QR code or enter the secret key into the Authenticator app of your choice, then click on Enable 2FA.


If you successfully enter the code, all active iRacing logins will be logged out, including the login to the Account Management application and an email will be sent to the email address on file notifying you that a 2FA registration has occurred.






Log back in to the Account Management application, and this time you will be prompted for your second factor of authentication. Enter your 2FA code from your authenticator app. If you check the Remember this browser box, you will not be prompted for 2FA again on this device if your session expires and you need to log back in.



In the Security section, you can now see that you have a registered 2FA device. Next, you should Generate Backup Codes using the steps in the next section so that you can still access your account if you ever lose access to your authenticator app.



Generating Backup Codes

While still in the Security section of the Account Management application, click on Generate Backup Codes.




A list of backup codes will be generated, and you can use the button shown below to copy them to your clipboard and store them in securely.



An email will be sent to the email address on file notifying you that backup codes have been generated for your account.



We highly recommend writing down or saving your 2FA backup codes securely. You can enter a code if you ever lose access to your authenticator app.


You may want to store them in your password manager, the Personal Vault of OneDrive or Dropbox, or print them out and put them in a secure location.