CMG 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
CMG, short for CheckMate Gaming, is the site where you play cash matches, XP matches and tournaments in games like Call of Duty and Fortnite. Your CMG account can hold real money: deposits, winnings and withdrawals all run through it. Two-factor authentication (2FA) is optional on CMG, but the company's own announcement says it strongly recommends it (CMG). The setup works with an authenticator app that scans a QR code. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the CMG steps come from CMG's own FAQ and its 2019 announcement article, linked below, which we read on October 21, 2026. We haven't tested them on a CMG account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
What CMG documents, and what it doesn't
CMG's help on 2FA is short. The FAQ explains what 2FA is and sends you to a news article from February 13, 2019, posted by a CMG staff account, for the actual steps (CMG). That article names Google Authenticator as the code option, but what it sets up is an ordinary QR code for an authenticator app (CMG).
The second half of the article walks through setting up 2-Step Verification on a Google Account on Android. Those steps are for Google's own account, not for CMG, so you can skip them.
Neither page mentions backup codes, a text setup key, changing phones or turning 2FA off. Where this guide says CMG doesn't say, that's why.
Turn on 2FA with an authenticator app
- Sign in to CMG on the website. Open the drop-down menu on the right and choose Account Settings (CMG).
- Find the 2FA setting. The 2019 article puts it in a Security section at the very bottom of the page, with a Change button. The newer FAQ says you enable 2FA under the Preference tab of Account Settings (CMG). The page may have changed since the article was written, so look in both places.
- For the code generation option, select Google Authenticator. CMG then shows a QR code.
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If you're on CMG on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the code that Novaz shows into the Verify 2 Step field, and enter your CMG password too.
- Confirm. CMG's article says your account is then set up with 2-step security.
CMG's pages don't mention a text key you could type instead of scanning. If you can't point a camera at the screen, the screenshot route in step 4 is the way around it.
A stronger password comes with it
When CMG added 2FA, it also raised its password rules. A password must be at least 10 characters, with an uppercase letter, a lowercase letter, a number and a special character, and it can't contain your username (CMG). The article also reminds you that CMG will never ask you for your password.
No backup codes documented
CMG's FAQ and article don't mention backup or recovery codes. Unless you turn on iCloud backup or export a backup file, Novaz keeps its keys only on your iPhone. So before you rely on 2FA, make sure you can still reach the email address on your CMG account. The FAQ mentions 2FA emails from CMG and says to check your spam folder, then contact Live Support, if one doesn't arrive (CMG). It doesn't explain when CMG sends them.
If CMG rejects your code
CMG's article blames clock problems for codes that don't work, and its fix is the time sync inside Google Authenticator on Android (CMG). On an iPhone, the clock that matters is the phone's own: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when your clock is 15 seconds or more off.
If the code still fails, CMG's FAQ says to use Live Support, the button at the bottom of the FAQ page (CMG). More causes are in Authenticator code not working?
If you lose your authenticator or change phones
CMG doesn't describe a recovery process, what proof it asks for or how long it takes. Its one documented route for any 2FA problem is Live Support (CMG). Note that Live Support doesn't handle banned or disabled accounts. For those, the FAQ points you to banned@checkmategaming.com or the CMGAccounts account on Twitter.
If you're moving to a new iPhone and have a Novaz iCloud backup or backup file, restore it there and your CMG codes come along. Without one, keep the old phone until you've set up 2FA again on the new one. CMG's pages don't say whether the Change button lets you swap authenticators yourself, so ask Live Support if you're unsure. Setting it up again means scanning a new CMG QR code on the new phone. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?
