Skip to content
Novaz AuthenticatorGET

Awin 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. When you need it
  2. Turn on 2SV with an authenticator app
  3. Your recovery code
  4. When Awin asks for a code
  5. If Awin rejects your code
  6. Turning 2SV off or changing phones
  7. If you lose your authenticator
  8. Official Awin help

Awin is an affiliate marketing network: publishers use their Awin account to join advertisers' programs and get paid, and advertisers and agencies use theirs to run those programs. Awin calls its two-factor authentication two-step verification, or 2SV. It works with any authenticator app that makes time-based codes, and Awin's help pages don't describe a text-message option (Awin).

Two things make Awin's setup different. You start it from a computer, not the Awin app or a phone browser, and Awin sends you a confirmation email before it shows the QR code (Awin). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Awin steps come from Awin's own help center, Partner Success Center and website, linked below, which we read on October 21, 2026. The Partner Success Center's normal article pages only load with JavaScript, so we read the same articles in the site's plain HTML view on success.awin.com. We haven't tested the steps on an Awin account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

When you need it

For most users 2SV is optional, though Awin strongly recommends it. It becomes a requirement in a few places:

  • Users with Owner or Admin permissions need it for sensitive tasks such as downloading invoices (Awin).
  • You can't open or change your Payment Details, including tax and payment information, without it (Awin).

Awin's help center notes that its 2SV article covers Awin Classic, so screens on other versions of the platform may differ.

Turn on 2SV with an authenticator app

Awin's Partner Success Center gives these steps (Awin):

  1. Sign in to Awin on a desktop or laptop.
  2. Click the user icon in the top right corner and select Security (Awin).
  3. Click Send email. Awin emails you to confirm it's you.
  4. Open that email and click It's me.
  5. Awin shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen.
  6. Type the 6-digit code from Novaz on the Awin screen.
  7. Awin shows a recovery code. Copy it and store it somewhere safe, then tick the checkbox to confirm you've saved it. 2SV is now on.
  8. Sign out and back in to check that it works.

Awin's pages don't mention a text key you could type instead of scanning, so plan to scan the QR code.

Only have a phone? The Security menu isn't in Awin's mobile interface. Awin's workaround is to sign in on your phone's browser and open https://ui.awin.com/idp/en/awin/2fa/settings directly. If the QR code then shows on the same iPhone that runs Novaz, take a screenshot, tap + in Novaz, then Choose a photo. See scanning a QR code on the same iPhone.

If the email doesn't arrive

Look in the spam, junk and promotions folders of the address you sign in with, and add no-reply@awin.com to your safe senders. Send email again works only after 120 seconds. If you see "Link has already been used", email security software probably opened the link first: mark the email as safe and request a new one (Awin).

Your recovery code

Awin gives you one recovery code, and it works only once. Using it signs you in and deletes your whole 2SV setup, so you set 2SV up again at your next sign-in and get a new code (Awin). If the phone is gone and you have no Novaz backup, this code is your only way back in without Awin Support. Keep it in a password manager or on paper, away from your phone. More in 2FA backup codes.

When Awin asks for a code

Awin's 2SV is adaptive. It asks for a code only when a sign-in looks unusual: a new device or browser, a different IP address or location, or an odd time of day. A familiar sign-in goes straight through, and you can't turn this behavior off. When you are asked, you can tick Remember this device for 30 days before you click Sign In (Awin).

If Awin rejects your code

Awin's troubleshooting page says a "recovery code is missing" message usually means the code doesn't match your account's 2SV setup. Check that the entry in Novaz belongs to the email address you sign in with, in case you have more than one Awin login. If it still fails, Awin Support can remove the old connection so you can set it up again (Awin).

Also check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Turning 2SV off or changing phones

On a computer, open Security from the user menu and click the Two-Step Verification Status toggle to turn it off. Remember that you lose access to your payment details while it's off (Awin).

Awin doesn't describe a phone change. While you still have the old phone, you can turn 2SV off and run the setup again with the new one. With Novaz's iCloud backup or a backup file, you can instead restore your accounts on the new iPhone and keep the same codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

First check for your recovery code, and look for the original email that confirmed 2SV was turned on. Without the code, Awin has to turn 2SV off for you:

  • Publishers: click Contact support at the bottom of Awin's troubleshooting article. Send the request from the email address registered to your publisher account, and include at least two of these: account registration date, postal code or phone number, street name, website, or the amount of your last payment (Awin).
  • Advertisers and agencies: contact your account manager, or email accesshelp@awin.com (Awin).

Awin's help center lists slightly different proof, such as the number of users on the account and the payment method, and always requires the email address of the user whose 2SV should be turned off (Awin). Have as many details ready as you can. Once Awin has turned 2SV off, you set it up again at your next sign-in. Awin doesn't say how long this takes. More in Lost the phone with your authenticator app?

Official Awin help