Bubble 2FA: how to set up an authenticator app

Your Bubble account is the one you use to build apps in the Bubble editor. Its two-factor authentication (2FA) is set once for the whole account, so it covers every app you own or work on. 2FA isn't required, but Bubble strongly recommends it: anyone who gets into your account could edit, copy, delete or transfer your apps (Bubble).

The one method Bubble documents is a code from an authenticator app, entered along with your password (Bubble). Its help doesn't mention text-message or email codes. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

This guide covers your own account. 2FA for the people who sign in to an app you built is a separate setting, in that app's Settings tab (Bubble).

How we checked this guide: the Bubble steps come from Bubble's own manual and Support Center, linked below, which we read on October 20, 2026. We haven't tested them on a Bubble account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Bubble's 2FA FAQ, last updated in May 2026, gives these steps (Bubble):

1. On your computer, sign in and go to bubble.io/account. Scroll down to the Security section.
2. Click Set up 2FA.
3. In the popup, enter your current password and click Generate QR code.
4. In Novaz, tap +, then Scan QR code, and point the camera at the code on your screen. If you're doing this on the iPhone itself, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Type the code Novaz shows into the popup and click Activate 2FA.

Bubble then confirms it with "You have successfully set up two-factor authentication." From then on, it asks for a code from Novaz every time you log in. Its pages don't mention a way to remember a device.

Bubble's manual uses other labels: a security tab on the Account page with an Enable 2FA button (Bubble). Use whichever one you see.

Neither page mentions a text key you could type instead of scanning, or says how many digits the codes have and how often they change. Scan the QR code: it hands those settings to Novaz.

If you signed up with Google, note that the setup asks for your password. Bubble's account help says a Google sign-up creates no Bubble password, and that you can make one with the password reset in the log-in popup (Bubble).

Make backup codes straight away

Backup codes are a separate step that needs a working code from your app, so do it now (Bubble):

1. In the Security section of your Account page, click Generate codes.
2. Enter your password and a code from Novaz, then click Generate codes.
3. Copy the codes, store them, and click Close popup.

Each code gets you in once, in place of an app code (Bubble). Bubble suggests keeping them offline, for example in a password manager or on paper somewhere safe, and making new ones if you think someone has seen them. The FAQ doesn't say how many you get or whether new codes cancel the old ones.

Bubble's manual warns that an authenticator app without a cloud backup makes recovery harder if you lose the phone. Novaz has a backup: iCloud backup (PRO) or a password-protected backup file, both under Settings > Backup. Use one, and keep these codes too, since they're the way back in if your Novaz backup is missing or out of date. See 2FA backup codes.

If Bubble rejects your code

Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

If codes still fail after a correct setup, Bubble's FAQ says Support can turn 2FA off for you once it has verified your identity (see below).

New phone or turning it off

To turn 2FA off, click Disable 2FA on your Account page (Bubble). Bubble recommends keeping it on.

Bubble doesn't describe moving 2FA to a new phone. Its FAQ covers the pieces: while you can still sign in, disable 2FA, then run Set up 2FA again with the new phone. Bubble doesn't say whether old backup codes survive this, so make a new set. If 2FA ended up on the wrong device, the FAQ says to ask Support for a reset.

With iCloud backup or a backup file, Novaz restores Bubble on a new iPhone without a fresh setup. Without one, a new iPhone means setting Bubble up again. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with a backup code, then disable 2FA and set it up again with your new phone.

Without backup codes, Bubble Support can turn off 2FA after checking that the account is yours. The FAQ says to contact Support using the email address on your Bubble account, or through the AI chatbot (Bubble). The chatbot, in the bottom-left corner of Bubble's Support Center, hands you over to the Support team when needed, around the clock (Bubble). The pages we read don't list a support email address.

Support may ask for one of these:

• a photo of you holding your ID, with the details readable,
• the last four digits of the credit card on your Bubble account, or
• details of a paid plan on one of your apps, such as Starter or Growth.

Keep access to your account's email address, because Bubble uses it to check who you are. Bubble doesn't say how long a reset takes.

More in Lost the phone with your authenticator app?

Official Bubble help

• Two-factor authentication (2FA): FAQ
• Bubble account security
• Security checklist
• Account Management
• Support policy
• Overview (Settings tab)