Above.com 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Above.com is a domain investment platform: registrar, parking and monetization, and marketplace in one account. Its two-factor feature, Two Step Authentication, works differently from most. Above.com's manual describes it as a code you type when you change something about your domains, not as a step at sign-in. With it on, you need a code to set DNS, view, add or delete DNS records, push or delete a domain, request an EPP (transfer) code, or set up URL forwarding (Above.com). The manual doesn't say whether the code is also asked for when you sign in. It does say the check doesn't apply to API queries, so changes made through Above.com's API skip it.
The code comes from an authenticator app on your phone. A phone number you add later can serve as a backup. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Above.com steps come from Above.com's own manual and support FAQs, linked below, which we read on October 21, 2026. We haven't tested them on an Above.com account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start: verify your account
Above.com only lets you use Two Step Authentication once both your email address and your phone number are verified (Above.com). You do this on the User Verification page, reached from the account menu through the Restricted link: a 6-digit code by call or text for the phone, a mailed link for the email. Your status then changes to Verified (Above.com).
Turn on 2FA with an authenticator app
Above.com's manual gives these steps (Above.com):
- Sign in to Above.com and click My Account.
- Under Account Details, click Two Step Auth.
- Click enable.
- Click Set up next to your mobile, then choose your phone type. Above.com then suggests an app to download; skip that if Novaz is already installed.
- Above.com shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the 6-digit code from Novaz and click the button the manual spells Verifiy and Save.
The manual's steps are written for Google Authenticator, and they only describe scanning the QR code. They don't mention a text key you could type instead, so plan to scan.
To have codes on more than one device, scan the setup QR code on each of them before you go on to the code step (Above.com).
After setup, the two factor configuration link opens the rest of the settings.
Save backup codes or add a backup phone
Above.com's advice is to set up a backup right after you turn the feature on. There are two kinds (Above.com):
- Backup codes. Go to My Account > Two Step Auth > Details, click Print or Download codes, and enter a code from Novaz. You get 10 codes, which you can keep with Print or Save to text file. Each works once. Generate new codes makes a fresh set, and only the newest set works (Above.com).
- A backup phone. Under Details, click Add phone Number, pick the country code, type the number, choose text message or phone call, and click Save. Then enter a code from Novaz and click Verify.
Novaz keeps its keys on your iPhone unless you make a Novaz backup, so if that phone is gone without one, these backups are what save you. Keep the codes off the phone. See 2FA backup codes.
If Above.com rejects your code
Above.com's pages don't cover rejected authenticator codes. Usually the problem is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. If you're typing a backup code, remember that a used code, or any code from an older set, won't work. More causes are in Authenticator code not working?
Moving to a new phone
Above.com's FAQ points to a Move to different phone option, which shows a QR code that you can scan on the new device (Above.com). The FAQ doesn't say where to find that option. Do it while the old phone still works. With a Novaz iCloud backup or backup file, you can restore the account on the new iPhone instead; without one, you add Above.com again on the new phone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Use one of your backup codes, or a code sent to your backup phone. Above.com describes both as a stand-in for the app until you set it up again. If you have neither, the manual's only route is to contact Above.com support at support@above.com (Above.com). It doesn't say what proof support asks for or how long it takes. See Lost the phone with your authenticator app?
Turning 2FA off
Go to My Account > Two Step Auth > Details and click Disable. Confirm with Continue, enter a code from Novaz, and click Disable again. You can turn it back on later (Above.com). After that, remove the Above.com entry in Novaz: open it and tap Remove account.
