Blockchain.com 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Blockchain.com runs a crypto wallet and trading account that you sign in to with a Wallet ID (or email) and a password. Two-factor authentication (2FA) adds a one-time code to that sign-in. It's optional, and Blockchain.com offers three kinds: an authenticator app, a YubiKey, or text messages. It recommends an authenticator app over SMS for anyone with a smartphone (Blockchain.com).
Two things catch people out. The setting doesn't appear at all if you signed up with Google or Apple and never finished your wallet setup. And anyone who controls your email inbox can remove 2FA with an automated reset. This guide covers both. It uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Blockchain.com steps come from Blockchain.com's own help center, linked below, which we read on October 21, 2026. The article pages refused automated requests, so we read them through the help center's public article feed on support.blockchain.com, which serves the same text. We haven't tested them on a Blockchain.com account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start
Blockchain.com says your account must be verified before you can set up 2FA. Its setup article doesn't say which kind of verification it means (Blockchain.com).
If you created the account with Google or Apple and have no password, the security settings stay hidden until you complete the wallet setup. Blockchain.com's fix (Blockchain.com):
- Sign in from a web browser and select Profile (the person icon), then Settings > Security Settings.
- If that section still isn't there, open the Wallet tab and select Continue with DeFi Wallet.
- Choose your account, enter your password, then go back to Profile > Settings > Security Settings.
Turn on 2FA with an authenticator app
Do this in a web browser. The help article walks through it like this (Blockchain.com):
- Sign in to your wallet and go to Settings > Security.
- Under Two-Factor Authentication, click Enable.
- Select Authenticator App.
- Blockchain.com shows a QR code and, next to it, a plain code you can type in instead. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the page is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- To type the code instead, tap +, then Enter key manually in Novaz. Put Blockchain.com in Service and paste the code into Setup key. See What is a 2FA setup key?
- Type the 6-digit code that Novaz now shows for Blockchain.com, then click Verify Code.
Blockchain.com's help names one authenticator app, but its codes are standard: six digits every 30 seconds, which is what Novaz makes from a typed key. Either way of adding the account works.
When you'll be asked for a code
From the next sign-in on, Blockchain.com asks for the code from your app each time you log in to the wallet (Blockchain.com). The help pages don't mention a way to remember a device.
No backup codes
The help center doesn't describe backup or recovery codes for 2FA. Don't confuse 2FA with the Recovery Phrase: that phrase restores your wallet and your funds if you forget your password or lose a device (Blockchain.com). It isn't a way past the 2FA step. Keep it offline and private, whatever you do with 2FA.
If Blockchain.com rejects your code
The help pages don't cover a wrong authenticator code. Their general sign-in advice is to check your connection, turn off any VPN, update the app, and on a computer try a private Chrome window (Blockchain.com).
For authenticator codes, the usual cause is the phone's clock. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
If you lose your authenticator
Blockchain.com handles a lost 2FA device with an automated reset, which also removes 2FA if you just want it off (Blockchain.com):
- Open the reset form at login.blockchain.com/#/reset-2fa.
- Enter your wallet identifier and the email address on your wallet, then click Continue.
- Blockchain.com emails that address. Click Approve Request to remove 2FA right away, or Decline Request to cancel. An unanswered request expires after three days.
Approving also resets any login IP restrictions on the wallet. Because the whole process runs through your inbox, protect that email account with its own 2FA. If the reset email doesn't arrive, Blockchain.com points you to its email troubleshooting article.
More in Lost the phone with your authenticator app?
Changing phones
Blockchain.com doesn't describe moving 2FA to a new phone. The documented route is the reset above, followed by setting up the authenticator again from Security. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone and skip the reset. Without one, keep the old phone until Blockchain.com is set up on the new one. See How to transfer your authenticator app to a new iPhone.
