Skip to content
Novaz AuthenticatorGET

ARIN 2FA: how to set up an authenticator app for ARIN Online

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Why the app rather than text messages
  2. Turn on MFA with an authenticator app
  3. Keep the 16 recovery codes safe
  4. No more shared logins
  5. If ARIN rejects your code
  6. Changing your method or your phone
  7. If you lose your authenticator
  8. Turning MFA off
  9. Official ARIN help

ARIN Online is where you manage what the American Registry for Internet Numbers (ARIN) holds for you or your organization: IP address and ASN records, resource requests, transfers and billing. ARIN calls two-factor authentication multifactor authentication (MFA), and every ARIN Online account must have it (ARIN). In a 2024 announcement, ARIN set October 7, 2024 as the date it would lock the remaining accounts that still had no MFA (ARIN).

There are three methods: an authenticator app, text messages, or a passkey or security key (ARIN). The catch: an account holds only one method at a time, so whatever you choose has only ARIN's recovery codes behind it (ARIN). This guide sets up the app with Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the ARIN steps come from ARIN's own help pages and the screenshots on them, linked below, which we read on October 20, 2026. We haven't tested them on an ARIN Online account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Why the app rather than text messages

ARIN sends MFA text messages only to the countries it lists, and points everyone else to an app or a security key (ARIN). The method picker in ARIN's screenshots marks the app as recommended (ARIN). More in Authenticator app vs SMS.

Turn on MFA with an authenticator app

ARIN accepts any app that follows the TOTP standard, RFC 6238 (ARIN), and Novaz follows it.

  1. Log in to ARIN Online. If MFA isn't set up yet, the Dashboard shows an alert with a Configure it now link. Otherwise, open Settings from the menu under your name.
  2. On the Manage Multifactor Authentication page, under Select Method, choose Authenticator Application and then Continue.
  3. The Verify Method step shows a QR code with a 16-character key under it. In Novaz, tap +, then Scan QR code. If the page is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
  4. To type the key, tap +, then Enter key manually. Put "ARIN" in Service, your ARIN username in Account if you want, and the 16 characters in Setup key. ARIN's codes are 6 digits, which matches what Novaz makes from a typed key. See What is a 2FA setup key?
  5. Enter the current code from Novaz in 6-Digit Code and choose Verify.
  6. On Save Recovery Codes, use Copy or Download to keep the codes (see below).
  7. Choose Activate MFA. ARIN's page says the last button may read Save MFA Changes instead.

Keep the 16 recovery codes safe

ARIN shows 16 recovery codes once, at the end of setup, and never again. Each one works a single time, in any order (ARIN). ARIN suggests a password manager, a printout, or a handwritten copy kept somewhere safe.

With no second MFA method allowed, these codes are the only fallback ARIN gives you. Store them away from your iPhone: if the phone is gone and you have no Novaz backup, they're your way back in. See 2FA backup codes.

No more shared logins

If your team shares one ARIN Online login, MFA ends that. ARIN says each person needs their own account, linked to your organization's role Point of Contact (POC) (ARIN).

If ARIN rejects your code

ARIN's pages don't cover rejected codes. The usual culprit is the iPhone's clock: go to Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing your method or your phone

The documented place to change MFA is Settings: select Actions in the Security Info box, then Manage Multifactor Authentication (ARIN). ARIN doesn't describe a separate step for moving the app to a new phone, so do it from that page while you can still log in with the old one. With Novaz's iCloud backup or a backup file, you can restore your accounts on the new phone instead; without one, the new phone needs a fresh setup. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

If you still have a recovery code (ARIN):

  1. Enter your username and password on the ARIN Online login page as usual.
  2. Select Trouble with multifactor authentication? below the login form.
  3. In the third field that appears, enter one recovery code and select Sign In.

If you have no usable recovery code, or you need MFA reset, call ARIN Registration Services at +1 703-227-0660. The help desk answers Monday to Friday, 7:00 AM to 7:00 PM Eastern Time (ARIN). To confirm that the account is yours, ARIN says you will:

  • join a video call with ARIN staff,
  • show a copy of your government-issued photo ID during that call, and
  • possibly answer further questions about your ARIN Online account.

ARIN doesn't say how long this takes. More in Lost the phone with your authenticator app?

Turning MFA off

You can't. ARIN requires MFA on every account, and its pages only describe changing the method (ARIN).

Official ARIN help

More guides: Business tools and other services