Bitrix24 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Bitrix24 is the online workspace many companies use for CRM, tasks and chat, and your login belongs to your company's Bitrix24 account. Its help center now describes two kinds of sign-in protection. The older one, two-step authentication, asks for a one-time code from the Bitrix24 OTP app or any app that makes time-based codes (TOTP) (Bitrix24, Bitrix24). The newer two-factor authentication drops authenticator apps: you approve sign-ins in the Bitrix24 mobile app or with an SMS code (Bitrix24).
This guide covers the older method, the one that works with Authenticator App - Novaz on iPhone. Any other authenticator app works the same way.
How we checked this guide: the Bitrix24 steps come from Bitrix24's own Helpdesk articles and their screenshots, linked below, which we read on October 20, 2026. We haven't tested them on a Bitrix24 account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Which method does your account use?
Bitrix24 refers to authenticator codes as "the older method with special applications" and recommends moving to the new one (Bitrix24). Its English help says the new method is required on the Professional and Enterprise plans, though an administrator can turn it off. Switching a company over is an administrator step: Settings > Security > Two-factor authentication > Enable.
You can tell them apart during setup. The new method needs the Bitrix24 mobile app, has you open a link from a QR code with your phone's camera, then asks for a phone number. If you see that, Novaz can't take part. Ask your administrator which method your company uses.
Turn on 2FA with an authenticator app
Bitrix24 describes these steps for the older method (Bitrix24):
- Open your profile and click Security, then Enable.
- Check that your phone and computer show the same time, as Bitrix24 asks.
- Bitrix24 shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Bitrix24 says you can enter the details by hand, but doesn't show that screen or the key's length. If you must, tap +, then Enter key manually, and type the key as the Setup key. Novaz needs at least 16 characters and makes 6-digit, 30-second codes this way, so scanning is safer. See What is a 2FA setup key?
- Type the current code from Novaz as the verification code and click Done.
Your Security panel then lists Two-step authentication as Enabled (Bitrix24).
After turning it on for themselves, administrators can make it mandatory in Settings > Security > Two-factor authentication with Mandatory for all employees and a deadline. Anyone who misses the deadline can't sign in (Bitrix24). The newer article calls the switch Enable for the entire company, so labels may differ.
Save your recovery codes
Right after setup, go back to your profile and click Security > Recovery Codes. Save or print them. Each one works a single time, and Bitrix24 doesn't say how many you get (Bitrix24).
If the phone is gone and you have no Novaz backup, or your backup file predates Bitrix24, these codes are what gets you in. Keep them away from the phone, on paper or in a password manager. See 2FA backup codes.
When Bitrix24 asks for a code
With the older method, every sign-in takes your login, your password and a fresh code (Bitrix24). A screenshot of the code screen in Bitrix24's help shows a Remember one-time password on this computer checkbox (Bitrix24). The help doesn't explain how long that lasts.
If Bitrix24 rejects your code
Bitrix24's help has no section on rejected codes. Its one related tip is the time check from setup. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. For other causes, see Authenticator code not working?
Changing phones
Do this while you still have the old phone. Open your profile, select Security, click My mobile device has changed, and set up the new phone from scratch (Bitrix24). In Novaz, you can skip this by restoring your accounts on the new iPhone from iCloud backup or a backup file; without one, this is the route for Novaz too. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Bitrix24 offers two ways back in (Bitrix24, Bitrix24):
- A recovery code. Enter your login and password, then type a saved code where Bitrix24 asks for the one-time code. The new-phone article calls these backup codes.
- An administrator. Only an administrator can switch the protection off for you. They open your profile, go to Security, click Disable and choose for how long. You then sign in with just your password and set up the new phone.
Administrators can do this for each other. If you're the only administrator, Bitrix24 says to contact its Support team through social networks. Bitrix24 doesn't say what proof Support asks for or how long a reset takes. More in Lost the phone with your authenticator app?
Turning 2FA off
Bitrix24 documents the Disable link next to Two-step authentication mainly for administrators acting on an employee's account. Its screenshot offers 1 day to 10 days, or forever (Bitrix24). If you turn it off for good, open the Bitrix24 entry in Novaz and tap Remove account.
