Bibox 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Bibox is a cryptocurrency exchange, and its account settings name only one authenticator app: Google Authenticator. That's a label, not a limit. Bibox describes the codes as GA/TOTP, the standard time-based kind, so any authenticator app can produce them (Bibox). Bibox also offers SMS and email codes, and since 2021 it has urged users to bind both an email address and an authenticator because text messages were arriving late or not at all (Bibox). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Bibox steps come from Bibox's own help center, linked below, which we read on October 24, 2026, through the help center's public article feed. We haven't tested them on a Bibox account, so a label may differ slightly. Most of these pages were last edited in 2021 and 2022. The Novaz steps are checked against the app, version 1.0.5.
Two settings, not one
Bibox splits this into two places in Account Security:
- Google Authenticator binds the app to your account. Bibox then uses its codes when you sign in, withdraw, or change your password and security settings.
- Two-factor Authentication is the sign-in protection. You can only turn it on after binding a phone number, an authenticator or an email address. Once it's on, Bibox asks for one of those codes every time you sign in (Bibox).
Bind the authenticator first, then check the second setting.
Turn on 2FA with an authenticator app
Bibox's help describes these steps (Bibox, Bibox):
- On the website, sign in at www.bibox.com, select the profile icon, then Account Security, then Google Authenticator, and choose Enable. One of Bibox's pages calls this entry Google Authentication, so the label may differ. In the Bibox app, tap the icon at the top left, then Security Center, then Google Auth.
- Bibox shows a QR code and a key. In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If it's on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If you'd rather type the key, tap +, then Enter key manually in Novaz. Enter Bibox as the Service, your email or phone number as the Account if you like, and the key as the Setup key. Bibox's pages don't give the key a special name. See What is a 2FA setup key?
- Novaz shows a 6-digit code. Type it into Bibox to finish binding.
- Go back to Account Security and open Two-factor Authentication (in the app, Security Center > Two-factor authentication) to make sure sign-in is protected too.
Bibox also warns you never to delete its entry from your authenticator app, because without the codes you can't use your Bibox account (Bibox).
No backup codes in the docs
Bibox's help doesn't describe backup or recovery codes. Its 2023 security reminder went the other way from most services: it asked Google Authenticator users to turn off cloud sync, saying synced codes could be lost (Bibox). Novaz doesn't sync its keys unless you turn on iCloud backup, which is end-to-end encrypted through iCloud Keychain. Without that or a backup file, a lost phone takes the codes with it, and the only way back is Bibox support (below).
If Bibox rejects your code
Bibox's own advice for a code that keeps failing is to check the time on your phone (Bibox). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Bibox lets you change the authenticator from the same place you set it up: Account Security > Google Authenticator on the web, or Security Center > Google Auth in the app (Bibox). Do it while the old phone still works. If you have a Novaz iCloud backup or backup file, restore it on the new iPhone and Bibox comes with it; otherwise you add Bibox again on the new phone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Bibox's newest page on this, from June 2022, splits the route by whether your account has passed identity verification (Bibox):
- Verified accounts: sign in, go to the page that asks for the Google code, choose Lost Security verification Item, and follow the prompts to apply for unbinding.
- Unverified accounts: send a request through Submit request. Staff reply by email and tell you what information to send.
Bibox doesn't say how long this takes. Its older guide gives service@bibox.zendesk.com as the address for a lost phone, while its other pages list support@bibox.zendesk.com, so the request form is the safer choice. Bibox staff never ask for your password or verification codes (Bibox). More in Lost the phone with your authenticator app?
Turning it off
You can't simply switch it off. Bibox says it doesn't let users cancel Google Authenticator for security reasons. It only lets you change it, or remove it through the unbinding request above (Bibox).
