Surfshark Login: Account, Device Codes and 2FA Help

Quick Answer

Open Surfshark’s official website or app and use the email/password or linked identity belonging to your subscription. To add a device without typing those credentials, display its login code and approve it from a device where you are already signed in. That device code is different from two-factor authentication. A successful login also does not mean the VPN is connected.

Surfshark login is straightforward once you identify which account and which prompt you are using. The confusing cases are usually a paid subscription attached to another identity, an extra security check, or a device that is signed in but has not established a VPN connection. I would resolve those separately rather than reset everything at once.

View Surfshark Plans

Contents

Choose the right sign-in method

Start from a bookmark to the official service, the official app, or a support page you navigated to yourself. Avoid a login form reached through an unsolicited message. Check the domain carefully before entering an account password, and never send a password or recovery code to someone claiming to offer faster support.

Email and password: use the address associated with your Surfshark account, which may differ from your usual email.
Linked Google or Apple account: choose the identity linked to your existing subscription. Creating another account will not automatically move a paid plan.
Device login code: approve a new device from your own already signed-in device or web account.
2FA prompt: supply the second factor configured for the account, rather than the new-device code.

Surfshark signin screen with email and password fields and google and apple options — Surfshark’s account signin example shows password and linkedidentity options.

If you already pay for Surfshark, locate the original receipt before purchasing again. Check the email address, seller and subscription details. This is especially useful if an Apple private relay address or a linked account is involved. Keep that information private when asking official support for help.

Sign in on the website or app

Open the official Surfshark site or an app installed from its official download page or the device’s authorised store.
Select Log in and enter the existing account credentials, or choose the original linked Google or Apple method.
Complete any configured security challenge. Only approve a device or login that you initiated.
On the website, check the subscription details. In the VPN app, also check the connection status before relying on the tunnel.

On a shared computer, avoid leaving the account signed in or saving its password in another person’s browser. On your own devices, a password manager can reduce typing mistakes and help distinguish the genuine domain from a lookalike. Use a unique account password and protect the email account used for password resets.

Use a login code to add another device

The code workflow has two roles: the new device displays a code, and a device already signed in to your account approves it. Keep the new device’s screen open while you complete the approval. Surfshark says these codes refresh every few minutes, so an old code may no longer work.

On the new device’s login screen, select the option for being logged in on another device. It displays a QR code or six-character login code.
On your already signed-in app, open Settings, My account, Enter login code. Alternatively, use Enter login code in the signed-in web account’s My account area.
Enter the code shown on your new device and confirm the login. Use the supported QR option only for the device you are setting up.
Return to the new device, check that the intended account is signed in, and connect the VPN if that is your purpose.

Surfshark my account menu highlighting enter login code — Surfshark’s signedin account menu includes the devicecode approval option. Labels can vary by app version.

A device code is sensitive because approving it gives that device access to your account. Do not type a stranger’s code into your account or scan a QR sent as an unsolicited support request. If you did not initiate a device login, stop and review account security through official support.

Device authorization and two-factor authentication solve different sign-in steps.

Handle two-factor authentication and recovery

Two-factor authentication adds a check after the account credentials. Use the configured authenticator or email method requested by the genuine login screen. A device-pairing code cannot replace this check. If a code fails, confirm that you are reading the current attempt and the correct account before retrying.

If your configured second factor is unavailable, Surfshark provides recovery codes saved when 2FA was enabled. Each recovery code can be used once. After entering your account credentials, choose the recovery-code option and use one of your saved codes. Once access is restored, review and reconfigure 2FA so you do not remain dependent on an emergency fallback.

Store recovery codes securely somewhere you can reach if the phone containing your authenticator is lost. Do not publish them, keep them in a shared note, or send them to support. If neither the second factor nor a recovery code is available, use the official account-recovery process; do not follow instructions to bypass security checks.

Reset a forgotten password or identify the right account

Select Forgot your password on the official login page, enter the account email and request the reset link. Follow the email instructions and choose a new password meeting the displayed requirements. Check spam or junk folders if the message does not arrive, and verify the address rather than repeatedly submitting different guesses.

Surfshark’s reset workflow can also help when an account was originally registered without a conventional password. However, first check whether you normally use a linked Google or Apple identity. An Apple relay address or store purchase can make the account address less obvious. Do not unlink an identity or create another paid account merely because the addresses look different.

Current support guidance directs registered-email changes to customer support rather than a self-service app or website setting. Use the official channel and provide only the requested ownership evidence. A VPN subscription is not an anonymous account: billing and account records are separate from claims about VPN traffic logging.

Troubleshoot the stage that actually failed

Website and app both reject the credentials: verify the account address, sign-in method and password-reset route first.
Only the app fails: update it from an official source and check its supported operating-system requirements. Avoid unofficial installers or blanket disabling of security software.
Too many login attempts: stop retrying and wait. Surfshark describes a temporary IP block that usually lasts about ten minutes. Follow the displayed instructions rather than trying to evade the limit.
Signed in but subscription appears expired: compare the account with the original receipt and seller. Follow the relevant store or iOS restore/support guidance before paying again.
Signed in but VPN will not connect: this is now a connection problem. Check internet access, app status and the official troubleshooting instructions for that platform.
Connected but a website rejects access: the website’s rules, account region or service restrictions can still apply. A working VPN does not guarantee access to every service.

If you contact support, describe the exact stage, device, operating-system and app version, and any safe error text. A redacted screenshot can help. Hide passwords, recovery codes, device-login codes, payment details and personal account information. There is no basis to promise a particular support response time or an identical fix on every platform.

Check plans, trials and billing before signing up

A login account and a subscription bundle are different decisions. Surfshark currently lists Starter, One and One+: the bundles add different services, so they do not all have identical features. App and operating-system support also varies. Choose the capabilities you will actually use, then compare the initial total, term, renewal amount, taxes and original seller.

Do not treat a long subscription as automatically the best value. A lower monthly equivalent can require a larger upfront commitment. Check what happens after any introductory period and whether an added service is useful for your device and region.

Surfshark currently describes a separate seven-day trial for qualifying new users through eligible website purchases of 12- or 24-month plans using supported payment methods. Its trial has a three-device limit; the paid subscription’s unlimited-device allowance is different. Check the specific offer, eligibility, payment requirement and first charge date before accepting.

The 30-day refund policy is not a free trial. The current policy applies to eligible initial purchases and excludes renewals, with seller and product conditions. Apple and Amazon purchases follow those sellers’ refund processes. Google Play has its own early refund route, with Surfshark support able to assist in eligible later cases. Check the policy for the purchase you actually made.

Cancel renewal without confusing it with a refund

For a directly managed subscription, open the signed-in account, select the account email, then Subscription, Payments and Cancel renewal, and complete the confirmation. Keep the confirmation and check the resulting renewal status. For a store-billed subscription, use the original seller’s subscription controls instead.

Cancelling renewal generally leaves access until the paid period ends. It does not itself request a refund. Logging out, uninstalling the app and deleting an account are also different actions; none should be used as a substitute for checking billing cancellation. If your account and seller records disagree, resolve that discrepancy with the relevant support channel before the next billing date.

What a successful login does and does not protect

After signing in, connect the VPN and check its status on the device carrying the traffic. Account login alone does not route traffic through a VPN tunnel. Device-specific exclusions and supported app features matter, and the same controls are not available on every platform.

A VPN can protect the included device-to-server connection, but websites you log into still know that account identity. It does not replace software updates, malware protection, secure passwords or careful permissions. I would judge a successful setup by the account being correct, the intended device being authorised and the required connection working, rather than by a reassuring login screen alone.

My recommendation

For an existing subscriber, recover the original account before buying anything else. Use code login when your own signed-in device is available, keep 2FA recovery separate, and check billing with the original seller. For a new subscriber, compare the bundle and renewal terms first, then install only the official supported app.

View Surfshark Plans

Frequently asked questions

Where do I find my Surfshark login?

Use the official Surfshark website or installed official app. Sign in with the email and password for the paid account, or its linked Google or Apple identity. A store receipt can help identify a different billing account.

Is the six-character device code my 2FA code?

No. The device code authorises a new device from an already signed-in account. A two-factor prompt asks for the configured second factor, or a saved one-use recovery code.

What if I forgot my password?

Use Forgot your password on the official sign-in page and request a reset email. Check the account address and spam folder. If you use a linked identity, confirm the original sign-in method before creating another account.

Why does my paid account say expired?

First check that the app is signed in to the account that owns the subscription. A linked identity, Apple relay address or store purchase may use a different account. Check the original receipt and supported restore or support workflow before paying again.

Does logging out or deleting the app cancel renewal?

No. Cancel renewal through the original seller’s subscription controls and retain confirmation. Cancellation normally leaves access until the paid term ends; a refund is a separate request.

Is the 30-day refund policy a free trial?

No. A refund policy follows payment and has eligibility conditions. Surfshark separately lists a seven-day trial for qualifying new users on eligible website purchases, with a three-device trial limit. Check the offer and billing date before accepting.

Am I protected as soon as I log in?

Signing in grants account access. The VPN must also connect successfully on the device. A VPN does not secure every account, remove malware or make browsing anonymous to a website you sign into.

Sources and image credits

Account sign-in and device-code menu images: Surfshark Support.

Stuart Kerr Spindlow

Stuart Kerr Spindlow is Impulsec’s Publisher, Chief Editor and Lead Reviewer. He writes and maintains coverage of consumer cybersecurity and digital-safety software, with a focus on practical suitability, limitations and the evidence behind product claims. Read Stuart’s full profile.