Checkfront 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Checkfront is booking software for tour, rental and activity businesses. This guide covers the staff-side logins (Admin, Staff and Partner) at an address like yourcompanyname.checkfront.com, not guest accounts.
Setting up two-factor authentication (2FA) here happens in two places. You switch it on in your Profile, but the QR code only appears the next time you log in (Checkfront). Checkfront supports an authenticator app, which it treats as the main method, and text-message (SMS) codes as the alternative. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Checkfront steps come from Checkfront's own help center, linked below, which we read on October 21, 2026. The help center blocks automated requests, so we read the articles' text through its public article feed and compared it with copies archived on web.archive.org in 2025. We haven't tested the steps on a Checkfront account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Is it required?
It's optional unless something requires it (Checkfront):
- Your Admin requires it. Admins can tick Require Two-Factor Authentication for all Accounts under Manage > User Accounts > Account Settings, or require it for one person. The all-accounts setting hides the option in individual profiles.
- Your business uses the Xero integration. Checkfront says Xero requires 2FA for every user, and that it can't be turned off while Xero is connected (Checkfront).
If your business has Google or Microsoft sign-in set up and you log in with Continue with Google or Continue with Microsoft Account, the extra check comes from Google or Microsoft, not Checkfront (Checkfront).
Turn on 2FA with an authenticator app
First, switch it on (Checkfront):
- Open the account menu at the top right of the navigation bar and choose Profile.
- Select Require Two-Factor Authentication.
Then log out and back in. After your email address and password, Checkfront shows a QR code and a box for a one-time code (Checkfront):
- In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If you're logging in on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Can't scan it? Click Trouble Scanning?. Checkfront shows the key, which it simply calls a code, with a Copy button. In Novaz, tap +, then Enter key manually, and put it in Setup key. See What is a 2FA setup key?
- Type the one-time code from Novaz and click Continue. You land in the Booking Manager.
Checkfront doesn't say how many digits its app codes have or how often they change, so scan the QR code if you can: it passes those settings to Novaz.
If you'd rather use text messages, Try another method on the same screen lets you enter a phone number and get a code by SMS.
No backup codes
None of Checkfront's 2FA articles mention backup or recovery codes. The way back in after losing your authenticator is a reset by an Admin, or by Checkfront Support if you are the Admin (see below).
When Checkfront asks for a code
Checkfront asks for a code each time you log in, after your password. Ticking Remember this device for 30 days stops the prompts on that device for a month (Checkfront).
If Checkfront rejects your code
Checkfront's help doesn't cover rejected app codes, but it warns that you get three login attempts before the account is blocked, so stop and check before you retry (Checkfront). The usual cause is the iPhone's clock: go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
Checkfront has a reset for this. In your Profile, click Clear Two-Factor Authentication. The button is briefly disabled and reads "Cleared", and your next login asks you to set up 2FA again (Checkfront). Do it while you can still log in, then scan the new QR code with the new phone. You can skip this if you have a Novaz iCloud backup or backup file: restore it on the new iPhone and your Checkfront codes keep working. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
It depends on your role (Checkfront):
- Staff or Partner: ask your Admin to clear your 2FA. The Admin opens Manage > User Accounts, clicks your Nickname, and clicks Clear Two-Factor Device Settings (Checkfront). You set it up again at your next login.
- Admin: contact Checkfront Support by live chat, phone or a support request (Checkfront). Checkfront doesn't say what proof it asks for or how long it takes.
More in Lost the phone with your authenticator app?
Turning 2FA off
Staff and Partners can't fully turn it off themselves: they ask their Admin. The Admin's steps are unusual. Turn on the all-accounts requirement and save, clear that person's two-factor device settings, then turn the requirement off again (Checkfront). With Xero connected, it stays on. Once 2FA is off, you can delete the Checkfront entry in Novaz: open it and tap Remove account.
