Campaign Monitor 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Campaign Monitor, the email marketing platform now run by Marigold, uses an authenticator app for two-factor authentication (2FA). Its help center describes no text-message option and no backup codes. Two other details matter before you start. Campaign Monitor's support team can't reset 2FA for you; only an administrator on your own account can. And that administrator can make 2FA mandatory for everyone on the account (Campaign Monitor). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Campaign Monitor steps come from Campaign Monitor's own help center and blog, linked below, which we read on October 21, 2026. We haven't tested them on a Campaign Monitor account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Each person turns on 2FA for their own login (Campaign Monitor):
- Sign in to Campaign Monitor, click your profile image in the top right, and choose Manage team.
- Under People in your account, click manage next to your own name.
- Click Enable two-factor authentication and follow the steps on screen.
- Campaign Monitor shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on your iPhone's own screen, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- When Campaign Monitor asks for a code, type the one Novaz shows.
The help center doesn't mention a text key you can type instead of scanning. If the setup screen offers one, tap +, then Enter key manually in Novaz, fill in Service, and paste the key as the Setup key (what a setup key is). Campaign Monitor says its codes change every 30 seconds, which matches what Novaz uses for a typed key.
Add the account to one authenticator app only. Campaign Monitor supports a single 2FA method per login, so if you later switch apps, delete the entry from the old one first.
When Campaign Monitor asks for a code
You'll be asked at sign-in, about once every 24 hours, and again when you change your password, add or remove someone from the account, or turn 2FA on or off.
The code screen has a Don't ask again on this device for 30 days box, ticked by default. It only remembers that one browser, it doesn't work in private or incognito windows, and Campaign Monitor advises against it on shared computers. Clearing your cookies forgets the browser, and resetting your 2FA forgets every browser at once (Campaign Monitor).
If your account requires 2FA
People with full access can set a policy under Manage team > Manage security settings: Optional for everyone (the default), Required for all people with full access, or Required for everyone. They have to turn on 2FA for their own login first. Once a requirement is saved, existing users get 30 days to set up an authenticator, and anyone who misses that window is locked out until an admin clicks Reset setup next to their name, which gives them another 12 hours (Campaign Monitor). The Issues logging in article points to the same policy as a way to protect the account.
No backup codes
Campaign Monitor's help center doesn't mention backup or recovery codes. Its fallback is an email link (below), so keep access to the email address on your login. That matters more if Novaz isn't backed up with iCloud backup or a backup file, because then its keys exist only on your iPhone.
If Campaign Monitor rejects your code
The help center doesn't cover rejected codes. Check the iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Make sure you're reading the Campaign Monitor entry and not an older one left over from an earlier setup. More causes are in Authenticator code not working?
Changing phones
Campaign Monitor doesn't describe moving 2FA to a new phone. What it does document is turning 2FA off and back on, which you can do from the old phone while it still works. If your account's policy requires 2FA, you can't turn it off yourself, so ask an admin about Reset setup. If you have a Novaz iCloud backup or backup file, restore it on the new iPhone instead; otherwise you'll set Campaign Monitor up again on the new one. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with your username and password as usual. On the code screen, click Lost your authenticator, enter your details and click Send email. Campaign Monitor emails you instructions for turning off 2FA; check your spam folder if nothing arrives. After you're back in, turn 2FA on again with your new phone right away.
If that doesn't work, ask an administrator on your account. Campaign Monitor says its support team can't reset 2FA, and that an admin does it after confirming who you are some other way (Campaign Monitor). The help center doesn't say what happens if you're the only admin. More in Lost the phone with your authenticator app?
Turning 2FA off
Go to Manage team, click manage next to your name, then Disable two-factor authentication. Afterwards, delete the entry from your app: in Novaz, open it and tap Remove account. You can't turn 2FA off while your account's policy requires it (Campaign Monitor).
Campaign Monitor has offered authenticator-app sign-in since 2018 (Campaign Monitor).
