Chargebee 2FA: how to set up an authenticator app

Chargebee is a subscription billing platform, and your Chargebee login opens the sites where your company keeps its customers, invoices and payment data. Two-factor authentication (2FA) adds a one-time code from an authenticator app to your password. Chargebee's documentation describes only that one method, plus recovery codes as the fallback. It's optional for each user unless a site admin makes it mandatory for the whole team. One catch comes first: if you sign in with single sign-on (SSO), Chargebee says you have to turn SSO off before you can turn 2FA on (Chargebee).

This guide uses Authenticator App - Novaz on iPhone for the app side. Any authenticator app works the same way.

How we checked this guide: the Chargebee steps come from Chargebee's own documentation and knowledge base articles, linked below, which we read on October 21, 2026. We haven't tested them on a Chargebee account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start: SSO and team policy

• If you use SSO: Chargebee's 2FA page says to go to Profile name > Manage Account/Edit profile > Go to Security, then under Authentication > SSO, click Disable and Confirm (Chargebee). If your company requires Google or SAML sign-in, check with your admin before you change anything.
• If you're an admin: under Settings > Security, the option Mandatory sign-in using a six-digit code (Two-factor authentication) makes every user enter a code each time they sign in. Chargebee lets you require it together with Google sign-in, so users need both (Chargebee).

Turn on 2FA with an authenticator app

Chargebee's current 2FA page gives these steps (Chargebee):

1. Sign in to Chargebee. In the bottom left corner, click your Profile name, then Manage Account/Edit profile, then Two-factor authentication.
2. Click Enable.
3. Chargebee shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the QR code is on your iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. Type the 6-digit code that Novaz shows and click Submit.
5. Download your recovery codes (next section).

Chargebee's documentation doesn't mention a text key you could type instead of scanning. If you see one on the setup screen, tap +, then Enter key manually in Novaz and paste it as the Setup key (What is a 2FA setup key?). Otherwise, plan to scan the QR code.

An older Chargebee knowledge base article names the path Account > Manage Account > Two Factor Authentication and mentions Google Authenticator by name (Chargebee). The newer 2FA page only says "authenticator app," so labels in your account may differ from either page.

Download the recovery codes

Each recovery code works once, and Chargebee gives them to you as a .TXT file. You can get them on the 2FA page while you set it up, or later from Username > Edit Profile. The same page has Generate New Codes if you need a fresh set (Chargebee).

Unless you've made a Novaz backup (iCloud backup or a backup file), the keys exist only on your iPhone, so this file is your safety net. Store it in a password manager or print it, not only on the phone. More in 2FA backup codes.

When Chargebee asks for a code

Once 2FA is on, Chargebee asks for the code from your app the next time you sign in. Chargebee's 2FA also has a Remember me on this device for 30 days option: turn it on after setup and that device skips the code for 30 days (Chargebee). Use it only on a computer that's yours.

If Chargebee rejects your code

Chargebee's advice is that the app's clock may be out of sync (Chargebee). Its steps are for Google Authenticator. With Novaz, fix the iPhone's clock instead: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Chargebee doesn't describe a way to move 2FA to a new phone. If you turned on iCloud backup in Novaz or exported a backup file, restore it on the new iPhone and your Chargebee codes carry on working. Without a Novaz backup, and while you still have the old phone, the safest route is to disable 2FA on your Profile page and enable it again with the new phone, which gives you a new QR code. Then download fresh recovery codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Chargebee gives you three routes, in this order (Chargebee):

1. A recovery code. Enter one instead of the app code, then set 2FA up again.
2. Your site admin. When you sign in, Chargebee shows a message saying whether an admin can reset your 2FA. If you can, an admin goes to Settings > Team Members and clicks Reset 2FA. You get an email, sign in, and set 2FA up again.
3. Chargebee Support. An admin reset only works when every site you and the admin belong to is under the same company, meaning the same Chargebee customer identifier. If your sites belong to more than one company, for example your employer and a client, Chargebee prompts you to contact Support.

Chargebee's knowledge base says Support can override 2FA from the backend, but only when the account's owner makes the request (Chargebee). Chargebee's pages don't say what other proof Support asks for or how long a reset takes. More in Lost the phone with your authenticator app?

Turning 2FA off

Click Disable in the 2FA section of your Profile page. Your account then relies on your password alone. To turn it back on, run the setup steps again (Chargebee). Chargebee doesn't say whether you can turn it off when an admin has made 2FA mandatory for the site.

Official Chargebee help

• Two-Factor Authentication
• How to reset the 2 Factor Authentication on my Chargebee account?
• I got a new phone and have not been able to access my authenticator app. I am locked out of Chargebee. What do I do?
• Add Users & Assign Roles