Baidu AI Cloud 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Baidu AI Cloud (百度智能云, also called Baidu Intelligent Cloud) is Baidu's cloud platform for servers, storage and AI services. Its two-factor authentication has two methods, a text-message code and what Baidu calls Virtual MFA: a code from an authenticator app. Baidu rates the app as the safer of the two (Baidu AI Cloud).
You may already have it on: starting May 26, 2025, Baidu switched Login Protection on for root accounts and IAM users that had it off, with both SMS and Virtual MFA selected (Baidu AI Cloud). This guide binds an app using Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Baidu AI Cloud steps come from Baidu AI Cloud's own documentation, linked below, which we read on October 21, 2026. Some of it, including the account recovery steps, exists only in Chinese, and we've translated it. We haven't tested the steps on a Baidu AI Cloud account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Two kinds of protection
Baidu splits two-factor authentication into two switches (Baidu AI Cloud):
- Login Protection asks for a code when you sign in to the console.
- Operation Protection asks for a code before sensitive actions. Root accounts have it on by default, with SMS.
When both SMS and Virtual MFA are on, either one is enough to pass, so anyone who gets your text messages can still get in. To make the app the only way, choose Virtual MFA alone. See authenticator app vs. SMS.
Turn on 2FA with an authenticator app
Baidu's English IAM guide gives these steps (Baidu AI Cloud):
- Sign in to the Baidu AI Cloud console on a computer (IAM users use their IAM user login link).
- Click your avatar in the upper-right corner to open User Center.
- In Security Settings, click the Settings button next to Login Protection, Operation Protection, or both.
- In the pop-up, choose Enable and pick one or both methods, including Virtual MFA. Click OK.
- Baidu shows a QR code the first time it asks for a Virtual MFA code. You can also bind from User Center > Security Information > Virtual MFA, with the 绑定 (Bind) button (Baidu AI Cloud).
- In Novaz, tap +, then Scan QR code, and point the camera at the screen. On the same iPhone, screenshot it and use Choose a photo. See scanning a QR code on the same iPhone.
- Type two consecutive codes from Novaz on the computer: the current one, then the next one after it changes. Click OK.
Baidu's pages don't mention a text key to type instead, so plan to scan the QR code. Codes change every 30 seconds. Labels vary between pages (Security Settings or 安全信息, Security Information), so follow what you see.
IAM users
A root account or an administrator can switch on protection for an IAM user under Identity and Access Management > User Management > IAM User, in the user's Two Factor Authentication section. Users with nothing bound yet go to the binding page at their next sign-in (Baidu AI Cloud).
IAM users who sign in through single sign-on (SSO) get no Baidu code prompt (Baidu AI Cloud).
With Save MFA status for 7 days on in the IAM settings, you can tick a box at sign-in to trust the device, and the same browser won't ask again for 7 days (Baidu AI Cloud).
No backup codes
Baidu's pages don't mention backup or recovery codes. Your fallbacks are SMS, if you leave it on, and the unbinding request below. Without a Novaz backup, the keys exist only on your iPhone, so keep your Baidu phone number current.
If Baidu AI Cloud rejects your code
Baidu's advice is to switch to another method on the page, such as SMS (Baidu AI Cloud). For app codes, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. When binding, enter two codes in a row. More in Authenticator code not working?
Changing phones
With the old phone in hand, click Unbind (解绑) next to Virtual MFA and enter the 6-digit code from the old phone, then bind the new phone (Baidu AI Cloud). If you have a Novaz iCloud backup or backup file, you can restore it on the new iPhone instead, and the existing binding keeps working. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
First try SMS, if it's still selected. If nothing works, ask Baidu to unbind the app. The English IAM guide just says to submit a ticket; the Chinese account guide describes a self-service unbinding tool (Baidu AI Cloud):
- Individual accounts: photos of both sides of the account holder's ID card, Baidu's unbinding request letter filled in and signed by hand, and proof of payment such as an invoice.
- Company accounts: the legal representative's ID card, the business license, and the request letter with the company seal.
Baidu says it reviews requests within 5 working days, and you can track yours in the tool. The pages don't describe a separate route for IAM users, whose settings their administrator controls. More in Lost the phone with your authenticator app?
Turning 2FA off
Open the same Settings pop-up and set Login Protection or Operation Protection back to off. Baidu allows this but asks you to weigh the risk of a leaked password first (Baidu AI Cloud). Unbind the app in Baidu before you tap Remove account in Novaz.
