BlueSnap 2FA: how to set up an authenticator app

BlueSnap is a payment platform, and its Merchant Portal is where a business handles orders, refunds, payouts and reports. Two-factor authentication (2FA) there works differently from most services: you can't turn it on just for yourself. An administrator turns it on for the whole account, and from then on every portal user has to enter a code from an authenticator app when they sign in. If the admin leaves it off, nobody is asked (BlueSnap).

BlueSnap documents one method only: a 6-digit code from an authenticator app. It doesn't mention text messages, email codes or backup codes. This guide uses Authenticator App - Novaz on iPhone for the user's side. Any authenticator app that scans a QR code should work the same way.

How we checked this guide: the BlueSnap steps come from BlueSnap's own support documentation, linked below, which we read on October 21, 2026. We haven't tested them on a BlueSnap account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Which app BlueSnap expects

BlueSnap's help page names only Google Authenticator and links to it from the setup screen (BlueSnap). The setup itself is a QR code that you scan, followed by a 6-digit code, which is the standard time-based setup any authenticator app can read. BlueSnap doesn't say whether other apps are supported, though. If Novaz's code is ever refused even with a correct clock, Google Authenticator is the app BlueSnap's page describes.

For admins: turn on 2FA for the account

Only a user with admin permission can change this setting (BlueSnap).

1. In the Merchant Portal, go to Settings > User Accounts.
2. Switch the Two-Factor Authentication setting on. It's off by default.
3. Click Submit.

Users who aren't signed in are affected right away. Anyone signed in at that moment sees the change at their next sign-in. Warn your team before you switch it on, so nobody is surprised by the setup screen.

For users: set up your authenticator at first sign-in

Once the admin has switched 2FA on, the setup happens the first time you sign in (BlueSnap):

1. Enter your username and password and click Submit.
2. A one-time setup screen opens with a QR code.
3. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the portal is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. Click Next on the BlueSnap screen.
5. Type the 6-digit code that Novaz shows and click Confirm.

BlueSnap's page doesn't mention a text key to type in place of the QR code. Plan to scan it, ideally from a computer screen.

When BlueSnap asks for a code

Every time. After the first setup, each sign-in is your username and password, Submit, then the current 6-digit code and Confirm (BlueSnap). The page doesn't describe a way to remember a trusted device.

If your company signs in to BlueSnap through its own identity provider with single sign-on (SSO), BlueSnap's SSO page says the provider's own password and two-factor rules can apply instead (BlueSnap).

If BlueSnap rejects your code

BlueSnap's help has no advice on rejected codes. The usual cause is the phone's clock. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. For other causes, see Authenticator code not working?

Lost phone or a new phone

There are no backup codes to fall back on, so the route back in is a reset. An admin can go to Settings > User Accounts and, in the Users section, click 2FA Reset next to the user. That button only appears while 2FA is on for the account (BlueSnap). The page doesn't say what the user sees after a reset, so ask your admin to confirm you can sign in and set up the app again before you wipe the old phone.

To move to a new iPhone, restore your accounts from a Novaz iCloud backup or backup file if you have one. Without one, the same reset is the way: ask your admin to reset you, then set BlueSnap up again on the new phone. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

BlueSnap doesn't say what happens if the only admin loses their authenticator. If your account has more than one admin, another one can reset you. Otherwise, the contact BlueSnap's pages give for account features is Merchant Support (BlueSnap). BlueSnap doesn't say what proof Support asks for or how long a reset takes.

Turning 2FA off

This also turns it off for every user at once (BlueSnap):

1. As an admin, go to Settings > User Accounts.
2. Switch Two-Factor Authentication off and click Submit.
3. Enter your password on the confirmation screen and click Disable.

After that, you can remove BlueSnap from Novaz: open the account and tap Remove account.

Official BlueSnap help

• Two-Factor Authentication
• User Management
• Single Sign-On with an IdP