Blossom 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Blossom (blossom88.com) is a deployment platform: you connect your own cloud account or servers, and Blossom provisions them, builds your apps from GitHub, GitLab or Bitbucket, and handles SSL, monitoring and backups (Blossom). Whoever signs in to your Blossom account can reach all of that, so a second step at sign-in is worth adding. Blossom's documentation describes one kind of two-factor authentication (2FA): a 6-digit code from an authenticator app, with backup codes as the fallback. It doesn't say 2FA is required. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Blossom steps come from Blossom's own documentation, linked below, which we read on October 21, 2026. We haven't tested them on a Blossom account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Blossom keeps its account help on a single short page, Two-Factor Authentication, filed under Account in its docs (Blossom, Blossom). Where that page is silent, this guide says so.
Turn on 2FA with an authenticator app
Blossom's documentation gives these steps (Blossom):
- Sign in at blossom88.com and open Profile Settings, then Two Factor Authentication.
- Click Enable Two-Factor Authentication.
- Blossom shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the 6-digit code from Novaz and your current Blossom password. This second field is easy to miss.
- Click Confirm and Enable Two Factor.
- Save the backup codes Blossom gives you (more below).
Blossom's page names a few authenticator apps as examples, but it isn't a fixed list. Its page only mentions scanning a QR code and doesn't describe a text key you could type instead. If Blossom does show one next to the code, in Novaz tap +, then Enter key manually, and paste it as the Setup key. Blossom says its codes change every 30 seconds, which is what a typed key gives you too. See What is a 2FA setup key?
Your 20-digit backup codes
Blossom's backup codes are 20 digits long, and each one works a single time. Its documentation asks you not to keep them as a screenshot: write them down or store them in a password manager (Blossom).
Without a Novaz backup (iCloud backup or a backup file), the keys exist only on your iPhone, so if that iPhone is gone, the backup codes are how you get back in.
When you've used several, or think someone has seen them, go to the Two Factor Authentication settings and click Regenerate Backup Codes, then save the new set. Blossom's page doesn't say whether the old codes stop working when you do this, so treat the new list as the only one. More in 2FA backup codes.
Signing in
After your email and password, Blossom asks for the 6-digit code from your authenticator app. Click Verify & Login to finish. At that step you can type one of your backup codes instead (Blossom). The page doesn't mention remembering trusted devices, so expect the code at each sign-in.
If Blossom rejects your code
Blossom's troubleshooting advice covers three things (Blossom):
- Check that your phone's time is right. On iPhone: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.
- If the code is about to run out, wait for the next one.
- Make sure you're reading the Blossom entry, not another account in your app.
Other causes are in Authenticator code not working?
Moving to a new iPhone
Blossom's page has two routes. Before you switch, set up the authenticator on the new phone. After you've switched, sign in with a backup code, turn 2FA off, and turn it back on with the new phone (Blossom).
With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone and skip both routes. Without one, the first route means doing that off-and-on cycle while the old phone still works: turn 2FA off, then turn it on again and scan the new QR code with Novaz on the new iPhone. Save the new backup codes it gives you. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your backup codes, then turn 2FA off and on again to connect a new phone. If you've lost the phone and the backup codes, Blossom's only advice is to contact support (Blossom). Its documentation doesn't say what proof support asks for or how long a reset takes.
Blossom's Support Center page lists an email address for support and says the team works Monday to Friday, 9 AM to 5 PM Pacific Time, with response times that depend on your support plan (Blossom). More in Lost the phone with your authenticator app?
Turning 2FA off
Open the Two Factor Authentication settings and click Disable Two-Factor Authentication (Blossom). Blossom's page warns that this weakens your account's protection. It doesn't say whether you'll be asked for a code first. Once it's off, open the Blossom entry in Novaz and tap Remove account.
