ClickUp 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your ClickUp account is what you sign in with to reach your team's Workspace, its tasks and Docs. Two-factor authentication (2FA) comes in two forms: an authenticator app, on every ClickUp plan, and text messages, only on the Business Plan and above (ClickUp). So below the Business Plan, the app is your only option.
Before you start, know that ClickUp's help pages don't mention backup codes. If you lose your authenticator, the documented way back in runs through a Workspace admin. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the ClickUp steps come from ClickUp's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a ClickUp account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Two ClickUp articles, both updated in October 2026, describe these steps with slightly different labels (ClickUp, ClickUp):
- In ClickUp, click your account avatar in the upper-right corner, then Settings.
- On the My Settings page, find the Two-factor authentication (2FA) section and click the toggle for Authenticator App (TOTP).
- Type your ClickUp password and click Confirm Password.
- Open Novaz on your iPhone, then click Yes, ready to scan in ClickUp.
- ClickUp shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If ClickUp is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the code Novaz shows into the Enter your verification code field and click Set up. If you then see Save changes, click it as well.
The newer article says you can type a code by hand instead of scanning, but doesn't say where that option is. ClickUp also doesn't say how many digits its codes have or how often they change, so scan the QR code: it passes those settings to the app, while Enter key manually in Novaz always makes 6-digit, 30-second codes.
Signing in afterwards
ClickUp says you'll be asked for a code each time you log in (ClickUp). Its help doesn't describe an option to remember a device.
With Continue with Google, ClickUp only says that 2FA still applies when your Workspace requires it (ClickUp).
No backup codes: plan for a lost phone
Unless you back up Novaz with iCloud backup or a backup file, its keys exist only on your iPhone, and ClickUp's help mentions no recovery codes. Two things help:
- Know your Workspace admin. They can get you back in (below). If you're the only admin, say on a Workspace you made for yourself, ClickUp's pages don't describe another route.
- Add text messages if your plan has them. ClickUp's update article has you turn on Text Message (SMS) alongside the app, so both can be on at once (ClickUp). It doesn't say how sign-in picks between them. See authenticator app vs. SMS.
If you lose your authenticator
ClickUp's one answer for 2FA trouble, lost phones included, is to ask your Workspace admin for a temporary login link by email (ClickUp). The admin clicks the Workspace avatar, then Manage users, opens the ellipsis... menu on your row, and chooses Email secure login link, then Confirm. The link expires in 24 hours; after that you need a new one (ClickUp).
Once you're in, ClickUp suggests updating your password and any settings that need it. For a lost phone, that means setting up the authenticator again on your current phone. More in Lost the phone with your authenticator app?
If ClickUp rejects your code
First check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
ClickUp adds two things. If sign-in hangs or fails, ClickUp may be down: check status.clickup.com. And if codes from the right app still fail, it says to get in with the admin's link, turn 2FA off, and contact ClickUp Support (ClickUp).
Changing phones
Do this while you can still sign in with the old phone (ClickUp):
- In Settings, click the toggle to turn off Authenticator App (TOTP). Enter your password if ClickUp asks, then click Yes, disable.
- Click the toggle again to turn it back on, and scan the new QR code with Novaz on the new iPhone.
- Enter the code, click Set up, then Save changes.
If your Workspace requires 2FA, ClickUp says to turn on Text Message (SMS) first, so 2FA stays on while you swap the app. If you have a Novaz iCloud backup or backup file, you can skip these steps and restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
When a Workspace requires 2FA
On the Business Plan and above, owners and admins can require 2FA in the Workspace's Settings > Security & Permissions, where the default is Don't require 2FA. With Require 2FA for all members, people get three logins before they must set it up (ClickUp, ClickUp). ClickUp's description of that setting says people then turn it on by SMS and doesn't mention the app, so ask your admin which method they expect.
Turning 2FA off
Click the toggle next to your method, type your password, click Confirm Password, then Yes, disable. You can't do this while a Workspace you belong to requires 2FA (ClickUp). Then delete the old entry in Novaz: open it and tap Remove account.
