It's surprisingly common to land abroad, try to log in to an account, and suddenly realize the two-factor authentication (2FA) code sent by SMS never arrives. With a data-only eSIM like Bloomy eSIM, you have working mobile data, but SMS messages sent to your regular phone number may not come through. If your accounts rely on SMS alone for verification, that can leave you locked out at the worst possible moment. This guide walks you through the 2FA prep that's worth doing before you leave, in clear steps that make sense even if it's your first time. By the end, you'll know exactly where to start.
- List the services that use SMS verification before you travel, and switch them to an authenticator app (TOTP)
- Save your backup codes on paper or in a password manager
- Set up a backup email or other non-SMS way to be reached
- Do a test login on mobile data only before you leave
- SMS and voice calls to a phone number won't work, but app-based calls like WhatsApp can run over mobile data
The short version: Before you travel, (1) list which services use SMS verification, (2) switch the ones you can to an authenticator app (TOTP), (3) save your backup codes, (4) set up a spare email or another way to be reached, and (5) run a test login before you go. Do this and you'll still be able to sign in abroad even when SMS doesn't arrive. It's far easier to handle while you're still home, where you can take your time and reach support if needed (general steps as of June 2026; each service's setup can change, so check the official help pages for the latest).
What is two-factor authentication? Start with how it works
Two-factor authentication (2FA) protects your login by adding a second step on top of your ID and password — a code that only you can receive or generate. There are three common ways to get that code:
- SMS verification: a code texted to your phone number. It's convenient, but it can stop working abroad if texts to your number don't arrive.
- Authenticator app (TOTP): an app on your phone that generates a roughly six-digit code that changes every 30 seconds. It doesn't depend on your phone number or on receiving a text.
- Backup codes (recovery codes): single-use spare codes issued in advance. They're your last key when neither SMS nor an authenticator app is available.
The case that causes the most trouble abroad is relying on SMS verification alone. Having more than one way to receive a code is, by itself, real peace of mind.
Why preparing before you travel matters
There are several reasons SMS may not arrive, or may be slow, when you're abroad. A data-only eSIM isn't designed to receive calls or texts to a phone number; roaming and network conditions can delay or drop SMS; and connection quality varies with local signal, congestion, your device, and the area you're in. These things are hard to fix once you've already arrived, and being locked out can stall everything from confirming hotel and flight bookings to sending money or using your messaging apps.
By contrast, switching to an authenticator app or saving backup codes usually takes just a few minutes per account while you're still home. That's exactly why doing it before departure — on a stable connection, with easy access to support — is the surest way to head off problems on the ground.
First, check: which services use SMS verification?
Your first step is to write down which of your services use SMS verification. Because you use them on autopilot, they're easy to forget the moment you actually need them. The usual suspects include:
- Social and messaging apps (verifying logins or new devices)
- Email and cloud accounts (tied directly to your messages, photos, and documents)
- Shopping, booking, and ride-hailing apps
- Banking and payment services (which call for extra care)
Financial and government-related services set their own rules, and whether — and how — you can use them from abroad can vary. Don't assume; check each provider's latest guidance before you rely on it. If you want to prioritize, start with the things that directly derail your trip if you can't log in (email, bookings, social) — that way you cover the most ground even with limited time.
Why switching to an authenticator app (TOTP) is reassuring
In most cases, an authenticator app can stand in for SMS verification. It generates a roughly six-digit code (TOTP) on your phone that changes every 30 seconds, and because it doesn't depend on your phone number or on receiving a text, you can check the code in an almost-offline way as long as you have mobile data. Most major services support it, and you can usually set it up under “Security,” “Two-factor authentication,” or “Login and authentication” in your settings.
The general flow for switching
Screen names differ by service, but the process is broadly the same:
- In the service's settings, choose something like “Add authenticator app” or “Authenticate with an app”
- Scan the QR code shown on screen with your authenticator app
- Enter the six-digit code from the app to activate it
Some services let you keep SMS as a backup after you switch. Rather than forcing yourself down to a single method, it's often better to combine a few — say, the app plus backup codes — so you have more options on the ground. Note that some authenticator apps need a specific migration step when you change phones, so if you bought a new device right before your trip, double-check that the migration is complete.
Pre-travel checklist
| Step | What to do | Key point |
|---|---|---|
| 1 | List the services that use SMS verification | Sort by priority — finance, social, email |
| 2 | Switch the ones you can to an authenticator app | Settings → Security → Two-factor authentication |
| 3 | Save your backup codes | Note them on paper or in a password manager |
| 4 | Register a spare email or other way to be reached | Set up a non-SMS channel |
| 5 | Run a test login before you leave | Confirm it works in airplane mode or on another connection |
The test login before departure is especially worth doing. Confirming that you can sign in with your authenticator app while you're still home takes a lot of the worry out of using it for the first time abroad. Try turning off Wi-Fi and using mobile data only, or logging out and back in, so you can check how it behaves under conditions close to the real thing.
What each method is — and isn't — good for
Every method has its strengths and weaknesses. With travel in mind, here's how they compare:
| Method | How well it works abroad | Watch out for |
|---|---|---|
| SMS verification | May not work if texts to your number don't arrive | A data-only eSIM alone may not receive them |
| Authenticator app (TOTP) | Easy to check the code as long as you have mobile data | Needs prior setup, plus migration when you change phones |
| Backup codes | Largely unaffected by connection issues | Guard against loss or leaks — store them safely |
The ideal is to set things up before departure so that even if one method fails, another still gets you in.
Backup codes and a spare way to be reached
Most services let you generate “backup codes (recovery codes)” once you've turned on 2FA. These are your spare key for when neither SMS nor an authenticator app is available. Rather than relying on a screenshot alone, keep them in more than one place — on paper and in a password manager, for example. Screenshots can be shared unintentionally through cloud sync, so it pays to be a little careful about where you store them.
It also helps to set up a spare email address and a way to reach family or someone you trust, so you can stay calm if something goes wrong. Note that app-based calls and messages — WhatsApp and similar apps — can work wherever you have mobile data. If you specifically need SMS to a phone number or a regular voice call, it's worth also looking into a plan with a number or a local SIM as a separate option. We cover how to think about numbers and SMS in our articles on phone numbers and SMS.
If you still can't authenticate abroad
Even with preparation, authentication doesn't always go smoothly once you're there. We've put together a separate article with concrete steps for exactly that situation — when you're already abroad and SMS verification isn't working. Reading it alongside this one makes your options clearer if something goes wrong.
What to do when SMS verification fails abroad | Data-only eSIMs and two-factor authentication
If you can't get online at all, the cause may be your connection settings rather than authentication. In that case, see troubleshooting connection issues and our setup guide. If you're not sure whether your device supports eSIM, take a look at our compatible device check as well.
Getting your connection ready with Bloomy
Bloomy eSIM is fundamentally data-only — there's no phone number, SMS, or voice calling. Having a stable data connection is the foundation for checking authenticator-app codes and making app-based calls. If you need SMS or voice calls to a phone number, it's reassuring to line up a separate solution as well. Keep in mind that a fair-use policy applies, and that actual connection quality varies with the local network, your device, and the area you're in.
If you'd like to check the eSIMs available for your destination, our Bloomy eSIM comparison page lets you search plans by country, data allowance, and number of days. For questions before setting up or using your plan, our FAQ is a good place to start. The plans, prices, and terms actually available can differ by country and region, so please check the latest details on the comparison page before you buy (as of June 2026).
