Brevo 2FA: how to set up an authenticator app

Brevo is the email, SMS and CRM marketing platform once called Sendinblue: sendinblue.com now forwards to brevo.com, and the sign-in screen in Brevo's help still reads "Formerly sendinblue" (Brevo).

Two-factor authentication (2FA) is optional unless the account owner, on a Standard, Professional or Enterprise plan, requires it for every user. Codes come from an authenticator app or by text message, with backup codes and an optional fallback SMS number for recovery. It applies to single sign-on (SSO) logins too (Brevo). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Brevo steps come from Brevo's own help center articles and the screenshots in them, linked below, which we read on October 20, 2026. We haven't tested them on a Brevo account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Have your inbox open first

Brevo treats 2FA changes as a sensitive action and asks for a one-time code first. While 2FA is off, that 6-digit code goes to your login email address, and you can resend it by email or SMS after a minute (Brevo).

Turn on 2FA with an authenticator app

From Brevo's 2FA article and its screenshots (Brevo):

1. Open the account dropdown and choose Settings > Security.
2. On the Two-factor authentication tab, click Enable two-factor authentication.
3. Enter the code from the email and click Verify.
4. On the Authenticator app card, click Set up using an application. (SMS Number is the text option, offered only once your account is validated and your profile is complete.)
5. Set up Authenticator App shows a QR code, with the key above it as unnamed plain text. In Novaz, tap +, then Scan QR code. If Brevo is open on the same iPhone, take a screenshot and tap +, then Choose a photo. See scanning a QR code on the same iPhone.
6. To type the key instead, tap +, then Enter key manually, and put it in Setup key. See What is a 2FA setup key?
7. Type the six-digit code from Novaz into the box under Enter the six-digit code from the authenticator app and click Confirm.
8. On Backup verification codes, use Download as PDF, Print or Copy codes. Brevo won't continue until you do.
9. Click Enable two-factor authentication.

Brevo doesn't say how often its six-digit codes change, so scanning the QR code, which carries the settings, is the safer choice.

Backup codes and a fallback number

Brevo's screenshots show eight one-time backup codes. The Recovery options section later shows how many remain, with a View backup codes button, and Brevo says you can make a new set at any time (Brevo). Novaz can back up its keys with iCloud backup or a backup file, but if you have neither, or your backup is older than this account, these codes are how you get back in. Keep them off the phone. More in 2FA backup codes.

Add fallback SMS number in the same section gives Brevo a second number for codes if you lose your main device. It needs a completed profile.

When Brevo asks for a code

• At sign-in. After your password or SSO, type the Novaz code in Authentication code and click Verify.
• Before sensitive changes. Changing 2FA, API keys, SMTP keys, users or login details needs a code: from the app, by SMS, or a recovery code (Brevo).
• Trusted devices. Removing one on the Devices tab ends its sessions, and its next login needs a 2FA code (Brevo). Brevo doesn't say how a device becomes trusted.

Requiring 2FA for everyone on the account

On the Standard, Professional and Enterprise plans, tick Activate two-factor authentication for all users in your account on the Two-factor authentication tab, then click Save: every user must set up 2FA at their next login. Brevo warns that turning off your own 2FA later affects them too (Brevo).

If Brevo rejects your code

Brevo's help doesn't cover rejected codes. Check the iPhone's clock first: go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Brevo has no new-phone instructions. Each method under Two-factor authentication methods has an Edit button, documented for switching between app and SMS: it cancels your current method and backup codes, then restarts setup (Brevo). Do it while the old phone still works, scan the new QR code, and save the new backup codes. If Novaz is backed up with iCloud backup or a backup file, you can skip this and restore your accounts on the new iPhone. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

The sign-in screen has two links under Having problems? (Brevo):

• Use one of your backup codes. A fallback SMS number, if you added one, also gets codes.
• Can't access your verification or recovery methods? contacts Brevo support.

Brevo doesn't say what proof support needs or how long it takes. See Lost the phone with your authenticator app?

Turning 2FA off

On the Two-factor authentication tab, click Disable two-factor authentication, confirm with Disable, then enter a verification code and click Verify (Brevo). Then open Brevo in Novaz and tap Remove account.

Official Brevo help

• Secure your account with two-factor authentication (2FA)
• Verify your identity for sensitive actions in Brevo
• My account has been compromised, what should I do?