Autotask 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Autotask is Kaseya's professional services automation (PSA) tool, where managed service providers run tickets and billing. On Autotask, two-factor authentication (2FA) isn't something you choose. Every customer must use either single sign-on (SSO) or 2FA, and without SSO, 2FA is switched on for everyone and admins can't turn it off (Autotask). The method is an authentication code from an app on your phone; emailed codes are no longer supported (Autotask). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Autotask steps come from Autotask's own help pages on autotask.net (help version 2026.5), linked below, which we read on October 21, 2026. We haven't tested them on an Autotask account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Who this applies to
- Most users: 2FA is required. The exceptions are API User licenses, where it isn't available, and Dashboard User licenses, where it's optional (Autotask).
- Your company uses SSO: your identity provider handles sign-in, and any Autotask 2FA set up before SSO is ignored (Autotask).
- You sign in with KaseyaOne: if your admin has turned on Log In with KaseyaOne, the code goes on KaseyaOne's page, which this guide doesn't cover (Autotask).
- You also use Datto RMM: the same app code works for both, and you only enter it in the first one you open (Autotask).
Turn on 2FA with an authenticator app
New users meet this during account setup: after you create a password and sign in, the Two-factor Authentication Setup page shows a QR code. Scan it, enter the code and click Validate (Autotask). On that first sign-in, don't click Log in with KaseyaOne: your account isn't linked yet, so it fails.
To pair a new app later, Autotask's help describes these steps (Autotask):
- Sign in to Autotask and go to My > Miscellaneous > Settings.
- Click Authentication Code Options.
- Click Request New QR Code. The window expands and shows a QR code.
- In Novaz, tap +, then Scan QR code, and point the camera at the code on your computer screen. If Autotask is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the 6-digit code from Novaz into Generated Code. Tick show if you want to see what you typed.
- Enter your password in Autotask Password.
- Click Validate. Autotask shows a success message.
Each code lasts 30 seconds, so if it runs out before you click Validate, use the next one.
No text key on screen
Autotask's setup page doesn't show a key you can type by hand. Its help suggests a browser QR reader to pull out the 16-character secret (Autotask), but with Novaz, scanning the screen or a screenshot is enough. If you do end up with the key, tap +, then Enter key manually, put "Autotask" as Service, your Autotask username as Account, and the key as Setup key. See What is a 2FA setup key?
Signing in
After your username and password, Autotask opens a second page for the authentication code. Enter the code from Novaz and click Verify. The same prompt appears when you sign in to LiveMobile or open the Outlook extension (Autotask).
If Autotask rejects your code
Autotask's help points at the clock: codes are time-based, so your phone has to set its time automatically rather than by hand (Autotask). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
No backup codes from Autotask
Autotask's help doesn't describe backup codes of its own. What it recommends instead is having a second administrator at your company and a verified email address on your account (Autotask). If your phone is gone and you have no Novaz backup, that second admin is your real backup.
Changing phones
While you can still sign in, request a new QR code under Authentication Code Options and scan it with the new phone, then validate a code from it. Autotask's help doesn't say whether the old phone's codes stop working. Do this before you reset the old phone, unless you're restoring your accounts on the new iPhone from Novaz's iCloud backup or a backup file. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Ask an Autotask administrator at your company. On the Security tab of your resource record, they can choose Not required for next login or Not required for 24 hours (Autotask). Sign in during that window and request a new QR code for your new phone (Autotask).
If you're the only admin, file a Kaseya Helpdesk request. With a verified email address, you show your driver's license on a Zoom call, and Kaseya emails you a code that works for 3 minutes. Without one, a database administrator removes 2FA after checking your identity, and Kaseya needs written consent from your company's Autotask Champion, sent from the Champion's email address. Autotask warns this is "not an instantaneous process" (Autotask). More in Lost the phone with your authenticator app?
Turning 2FA off
You can't, unless your company moves to SSO; admins can only pause it. If you no longer need the code, open Autotask in Novaz and tap Remove account.
