Auth0 2FA: how to set up an authenticator app for the Dashboard

Your Auth0 account is the one that signs you in to the Auth0 Dashboard at manage.auth0.com, where developers and admins configure login for their own apps. For most people, a second step there isn't optional. Since February 2, 2024, Auth0 has required Dashboard users who sign in with a username and password, or with a social account, to enroll in multi-factor authentication (MFA) (Auth0). The notice doesn't mention company single sign-on.

The Dashboard accepts a security key, device biometrics, push prompts in the Auth0 Guardian app, text messages (paid plans only), or one-time passwords from an authenticator app (Auth0). This guide sets up the last one with Authenticator App - Novaz on iPhone. Other authenticator apps follow the same steps.

How we checked this guide: the Auth0 steps come from Auth0's own documentation and changelog, linked below, which we read on October 20, 2026. We haven't tested them on an Auth0 account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Signing in to an app that uses Auth0?

Many companies use Auth0 for their own app's sign-in page. That account belongs to the app: the company behind it picks the methods (Auth0), and its administrator is the one who resets your MFA if you lose your device (Auth0). Auth0 Support doesn't reset those accounts (Auth0), so ask that app's support. This guide covers the Dashboard.

Turn on 2FA with an authenticator app

Auth0 calls this method one-time passwords (OTP). Its steps (Auth0):

1. Sign in to the Auth0 Dashboard.
2. Click your username in the top right corner, then Your Profile.
3. Find the one-time password row and click + ADD.
4. Follow the on-screen instructions. For the QR code, open Novaz, tap +, then Scan QR code. If the Dashboard is open on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
5. Auth0's pages don't describe a text key. If you get a code to copy instead, tap +, then Enter key manually in Novaz, type Auth0 as the Service, and paste the code as the Setup key. See What is a 2FA setup key?
6. Type the code Novaz shows to finish enrolling.
7. If this is your first method, Auth0 then shows a recovery code to copy. Save it.

After that, Auth0 keeps offering at each login to enroll the device's biometrics, such as Face ID or Windows Hello, which then work on that device only (Auth0).

Plan for a second way in

Auth0 suggests three methods: a security key, Guardian or an authenticator app first, text messages as backup (paid tenants only), and a recovery code. Without backups, Auth0 warns, "your account may be irrecoverable" (Auth0).

That matters with Novaz too: unless you turn on iCloud backup or export a backup file, its keys exist only on your iPhone. Keep the recovery code off your phone, in a password manager or on paper, and consider a security key too. Lost the code? Make a new one in Your Profile (Auth0). More in 2FA backup codes.

When Auth0 asks for a code

Every Dashboard sign-in adds a second screen after your usual sign-in step (Auth0). The docs mention no way to skip it on a trusted computer, only a Log in Faster on this Device prompt that lets a new device's biometrics handle it next time.

To switch methods, Auth0's pages call the link Select Another Method in one place and Try another method in another.

If Auth0 rejects your code

Auth0's Dashboard pages don't cover rejected codes. Check the iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. For other causes, see Authenticator code not working?

Changing phones or removing a method

Auth0's way to swap methods: in Your Profile, click + ADD on the new method, then REMOVE on the old one and Yes. Auth0 makes you verify with your current methods first (Auth0). The docs don't say whether two authenticator apps can be enrolled at once. If not, remove the old entry while you still have the old phone, then add it again from the new one. With a Novaz iCloud backup or backup file, you can restore the account on the new iPhone instead and skip this; see How to transfer your authenticator app to a new iPhone.

The docs cover removing methods, not turning MFA off, and Auth0 requires MFA for password and social sign-ins.

If you lose your authenticator

If you have another method or the recovery code (Auth0):

1. At sign-in, click Try another method and pick one you still have.
2. In Your Profile, click REMOVE next to the lost authenticator, then Yes, and verify again.
3. Add Novaz again with + ADD. The docs don't say whether a used recovery code keeps working, so make a fresh one in Your Profile.

With nothing left, Auth0 makes no promises. Another administrator on your tenant has to file a support ticket for you, and Auth0 may not be able to confirm the account is yours (Auth0). A separate page simply says to contact Auth0 Support for an admin MFA reset (Auth0). Neither says what proof is needed, how long it takes, or what a tenant's only member can do. More in Lost the phone with your authenticator app?

Official Auth0 help

• Multi-Factor Authentication for Dashboard Users
• Add Multi-Factor Authentication for Auth0 Dashboard Access
• Remove or Change Dashboard Multi-Factor Authentication
• Reset Account Passwords
• Reset User Multi-Factor Authentication and Recovery Codes
• Enable Multi-Factor Authentication
• Auth0 Changelog: MFA for Auth0 Dashboard Administrators