Cloud 66 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Cloud 66 deploys and runs apps on your own cloud servers, so one login can reach a team's servers, databases and deploys. Two-factor authentication (2FA) is optional unless an account owner turns on the team-wide rule that makes every member set it up first. You can protect the login with an authenticator app, a physical FIDO2 security key, or both (Cloud 66). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Cloud 66 steps come from Cloud 66's own help pages, linked below, which we read on October 24, 2026. We haven't tested them on a Cloud 66 account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start: switch to your default organization
If you belong to more than one Cloud 66 organization, the security settings only appear while you're in your default one. Switch with the organization dropdown at the top right first (Cloud 66). If Login & Security is missing from your settings, this is the likely reason.
Turn on 2FA with an authenticator app
Cloud 66's help describes these steps (Cloud 66):
- Open your Cloud 66 Dashboard and click your account avatar at the top right.
- Select Account Settings.
- In the Account panel on the left, click Login & Security.
- Open the Two-factor Authentication tab.
- Click the green Next - Scan barcode and verify button.
- Cloud 66 shows a barcode (a QR code). In Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the code from Novaz and click Verify.
Cloud 66 says you can also type the key's details by hand if scanning fails, but its help doesn't say what the key is labeled. In Novaz, tap +, then Enter key manually, and fill in Service, Account (optional) and Setup key. See What is a 2FA setup key?
Scan the QR code if you can. Cloud 66's help only says the code changes "every minute or so" (Cloud 66), so it doesn't pin down the interval. A QR code carries the exact settings into Novaz, while a key typed by hand always gets 30-second codes.
How often Cloud 66 asks for a code
On a computer and browser it knows, Cloud 66 asks only now and then, or when something changes, such as your network (Cloud 66). It decides with risk checks, and an Account Protection Level setting controls how sensitive those checks are:
- Relax asks much less often.
- Normal is the default and asks when the risk looks higher.
- Strict asks at every login.
The level applies to the whole account, including every team member under it, and does nothing until 2FA is on.
If your organization signs you in through SAML single sign-on, Cloud 66 skips its own 2FA for those logins. When SSO-only isn't turned on, logins that skip SAML still follow the organization's 2FA rules (Cloud 66).
Requiring 2FA for your team
Under Login & Security, an account owner can scroll to Enforce 2FA for your Team and click the green Force 2FA for button, followed by the team's name. Members must then set up 2FA before they can reach the team's account (Cloud 66).
No backup codes: add a second key instead
Cloud 66's help pages don't mention backup or recovery codes. What they do recommend is a backup 2FA key, so a lost or stolen device doesn't lock you out. Its security score checks whether you have more than one key (Cloud 66).
Unless you turn on iCloud backup or export a backup file, Novaz keeps its keys only on your iPhone, so a second method matters here. Cloud 66 lets you add a FIDO2 security key: on Login & Security, open the Security Keys tab, click + Add Security Key and follow the steps. A YubiKey works, and so does Touch ID on a Mac in recent Chrome, Safari or Edge (Cloud 66).
If Cloud 66 rejects your code
Cloud 66's help has no advice for rejected authenticator codes. The usual cause is the phone's clock. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
Cloud 66 doesn't document how to move the authenticator to a new phone. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone and the codes keep working. Without one, you'll need to set Cloud 66 up again on the new phone. Do it while the old phone still works, and keep your security key as a fallback. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with your security key if you added one. Cloud 66's help doesn't describe a recovery process for a lost authenticator, what proof support asks for, or how long it takes. Support tickets are filed from the Support link in the Dashboard, which you can't reach while locked out (Cloud 66). The one support email address the help pages list is support@cloud66.com, given for unlocking accounts that Account Protection has blocked (Cloud 66). More in Lost the phone with your authenticator app?
