BullionStar 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
BullionStar is a Singapore bullion dealer. Your BullionStar account holds your order history, any cash balance you keep with the company, and, if you use it, metal stored in BullionStar's vault. Two-factor authentication (2FA) is optional, but BullionStar strongly recommends it, and you can switch it on while opening the account or at any time later (BullionStar).
BullionStar's 2FA page describes one method: a code from an authenticator app at every login. The setting itself names Authy, Google Authenticator, or any other TOTP app, so you aren't tied to one app. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the BullionStar steps come from BullionStar's own help pages, including the screenshot on its 2FA page, linked below, which we read on October 21, 2026. We haven't tested them on a BullionStar account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
BullionStar's help page gives four steps (BullionStar):
- Log in to BullionStar and open Account Details. BullionStar's account FAQ gives the path as Your Account > Account Details (BullionStar).
- Click the 2FA & Mobile icon. In the screenshot it's the second icon in the row, labeled 2 FA & Mobile, next to Account Details and Change Password.
- Next to the 2-Factor Authentication heading, click the slider so it turns green.
- A pop-up shows a QR code and a secret key. In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If the pop-up is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If you'd rather type the secret key, tap +, then Enter key manually in Novaz. Fill in Service (for example, BullionStar), Account if you want, and type or paste the secret key into Setup key. See What is a 2FA setup key?
BullionStar's page doesn't describe a step where you type a first code to confirm the setup. It says 2FA is on after the pop-up, and that you'll need a code at your next login. Before you close the pop-up, check that Novaz now shows a BullionStar code. If it doesn't, add it again from the QR code or key before you close anything.
When BullionStar asks for a code
Once 2FA is on, BullionStar asks for a code every time you log in (BullionStar). The help pages don't mention trusted or remembered devices.
Vault storage has a separate lock. Before your first vault storage purchase, BullionStar has you choose a PIN of at least four digits, and online vault transactions ask for it after that (BullionStar). The PIN isn't your 2FA code, so don't mix them up.
Authenticator app or text message
BullionStar's pages disagree here. The current 2FA page only covers an authenticator app. The older IT & Account Security page and the account opening page also offer codes by text message to your phone (BullionStar, BullionStar). If you see a text message option, the authenticator app is the safer choice. See Authenticator app vs SMS.
No backup codes in the help pages
BullionStar's help pages don't mention backup or recovery codes, a second method to fall back on, or a way to move 2FA to a new phone. On the Novaz side, iCloud backup or a backup file lets you restore BullionStar on a new iPhone. Still, if the pop-up offers backup codes, save them away from your phone. Without codes or a Novaz backup, your way back in after losing the phone is BullionStar's support team (below).
If BullionStar rejects your code
BullionStar's help doesn't cover rejected codes. The usual cause is the phone's clock. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
BullionStar doesn't document how to move 2FA to a new phone. Novaz can restore it from iCloud backup or a backup file. Without one, you'll set BullionStar up again on the new phone. Keep the old phone until you've done that. The help pages don't say whether turning the slider off and on again gives you a new QR code, so if you're unsure, contact BullionStar. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
BullionStar doesn't publish a 2FA recovery process. What its account FAQ does say is that a locked account goes through staff: you contact BullionStar and someone helps you unlock it (BullionStar). The Contact Us page lists phone numbers for Singapore, the US and New Zealand, an email option, and the Singapore shop's opening hours (BullionStar). The help pages don't say what proof of identity BullionStar asks for or how long it takes. Have your account email and personal details ready.
BullionStar emails you whenever details on your account change, and tells you to contact it about any change you don't recognize (BullionStar). Watch for that email after a 2FA reset.
More in Lost the phone with your authenticator app?
Turning 2FA off
BullionStar's help doesn't describe turning 2FA off. The setting is a slider on the 2FA & Mobile tab, but the pages don't say what it asks for when you switch it off.
