Skip to content
Novaz AuthenticatorGET

Carrd 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. Don't skip the backup codes
  3. If Carrd rejects your code
  4. Changing phones
  5. If you lose your authenticator
  6. Turning 2FA off
  7. Official Carrd help

Carrd is a builder for simple one-page websites, and your Carrd account is where you build, publish and pay for them. Two-factor authentication (2FA) is optional on Carrd, and there's only one kind: a code from an authenticator app that supports time-based codes (TOTP), which Carrd then asks for each time you log in (Carrd). Carrd's documentation doesn't mention text-message codes.

The part to watch is the backup codes: Carrd marks them optional, and its help describes no other way back in if your phone is gone. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Carrd steps come from Carrd's own documentation, linked below. Carrd's website refused connections from our automated reader, so on October 20, 2026 we read the pages as archived copies on web.archive.org. The two-factor page was saved on April 6, 2026, and the other pages between May and October 2026. We haven't tested the steps on a Carrd account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Carrd's help now lives on carrd.com (old carrd.co links redirect), and its account index from August 2026 still lists the same two-factor page (Carrd).

Turn on 2FA with an authenticator app

Carrd's page gives these steps (Carrd):

  1. Log in and open the Dashboard.
  2. Click your Account avatar in the corner.
  3. Click Security in the sidebar (Carrd). This is your Account Security page.
  4. Under Two-Factor Authentication, click Enable.
  5. Follow the instructions on the screen. If Carrd shows a QR code, open Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on your iPhone's own screen, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
  6. If Carrd asks for a code to confirm, type the current one from Novaz.
  7. Back on Account Security, click Backup Codes and print or save them (more below).

Carrd's documentation stops at "follow the on-screen instructions" (Carrd), so it doesn't say whether you'll also see a text key or how many digits the codes have. Scan the QR code if you can, since it passes the code settings to your app. If you only have a key, tap +, then Enter key manually, and type it as the Setup key. Novaz then makes 6-digit, 30-second codes. See What is a 2FA setup key?

Older instructions you find may call the setting Google Authenticator. That was its label on Carrd's page until 2024, with the same Enable and Backup Codes steps (Carrd).

Don't skip the backup codes

Carrd's backup codes are one-time codes for logging in when you can't reach your authenticator app. Click Backup Codes on the Account Security page to view and print them. Its page doesn't say how many you get or whether you can make a new set (Carrd).

Keep them even if you back up Novaz with iCloud backup or a backup file: they get you in if the phone is lost and that backup is missing or out of date. Keep the codes on paper or in a password manager, away from the phone. More in 2FA backup codes.

If Carrd rejects your code

Carrd has no advice on wrong 2FA codes. Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

If the login page shows an error or times out instead, Carrd suggests a private or incognito window, then another browser or device, since an extension can interfere (Carrd).

Changing phones

Carrd doesn't describe moving 2FA to a new phone. Its page does document Disable and Enable on Account Security, so while the old phone still works, turn 2FA off, then on again with the new one. Or restore Novaz on the new iPhone from iCloud backup or a backup file. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Log in with one of your backup codes. Without them, Carrd's help pages describe no recovery. For log-in problems, its pages point you to the contact form at carrd.com/contact. Carrd says it usually replies within a day, and to check your spam folder or write again from another address if you hear nothing (Carrd). Carrd doesn't say whether it will turn off 2FA for you, what proof it asks for, or how long that takes.

More in Lost the phone with your authenticator app?

Turning 2FA off

Go to your Account Security page and click Disable (Carrd). Carrd doesn't say whether it asks for a code first. Then remove Carrd from Novaz: open the account and tap Remove account.

Official Carrd help

More guides: Hosting and cloud