CloudBees 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your CloudBees account is the sign-in at app.cloudbees.com. It gets you into CloudBees Unify, the company's DevOps platform, and into the CloudBees support and training sites. CloudBees calls two-step sign-in multifactor authentication (MFA). It's optional and uses an authenticator app; the docs describe no SMS option.
Before you start, check how you sign in. CloudBees MFA only applies to accounts with CloudBees credentials, meaning an email address and password. If you sign in with Google or GitHub, CloudBees says to set up two-step sign-in in that Google or GitHub account instead (CloudBees). You also can't switch methods later: you keep signing in the way you chose when you created the account (CloudBees).
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the CloudBees steps come from CloudBees's own documentation, linked below, which we read on October 21, 2026. We haven't tested them on a CloudBees account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
CloudBees has two pages for this: a short CloudBees Unify page from October 2026 (CloudBees, CloudBees), and a 2022 account management page for the support and training sites with more labels (CloudBees). Together they describe these steps:
- Sign in at app.cloudbees.com with your email address and password.
- Select your account name, then User profile. In CloudBees Unify, the setting is on the Profile tab. The older page has you select your initials in the top right corner, then your name, then Security in the left pane.
- Select Enable multifactor authentication. CloudBees shows a QR code.
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Select Continue, then Enter code, type the six-digit code from Novaz, and select Continue again.
- CloudBees shows a recovery code. Save it somewhere safe, then select Close.
Neither page mentions a text key, so plan to scan the QR code. If CloudBees does show a key, tap + in Novaz, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
One recovery code, not a list
CloudBees gives you a single recovery code. It works once, and each time you use it to sign in, CloudBees gives you a new one (CloudBees). So after a recovery sign-in, save the new code right away, or you'll have no fallback next time.
Without a Novaz backup (iCloud backup or a backup file), the keys exist only on your iPhone, and even with one, the recovery code gets you in if the backup is out of date. Keep it in a password manager or on paper, away from the phone. More in 2FA backup codes.
Signing in with MFA on
After setup, you sign in with your email, your password, and the current code from Novaz (CloudBees). The docs don't say whether CloudBees remembers trusted devices. Turning MFA off also asks for a code (CloudBees).
If CloudBees rejects your code
CloudBees's docs don't cover rejected codes. The most common cause is the iPhone's clock: go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones or apps
CloudBees says you can't change the authenticator app once MFA is set up. To move to a new app or phone, turn MFA off and turn it on again with the new one (CloudBees). Do it while the old phone still works, since turning MFA off asks for a code. If you have a Novaz iCloud backup or backup file, you can restore it on the new iPhone instead; without one, this is also how you'd move CloudBees to a new iPhone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
On the sign-in screen, select Use the recovery code and type the code you saved. Then save the new code CloudBees shows you (CloudBees). Once you're in, turn MFA off and set it up again on your new phone.
The docs don't say what to do if you've lost both the phone and the recovery code. They don't name a recovery process, the proof CloudBees would want, or how long it would take. Your only option would be to ask CloudBees Support. More in Lost the phone with your authenticator app?
Turning 2FA off
In CloudBees Unify, go to Edit profile, select Disable multifactor authentication, confirm, then refresh the browser (CloudBees). The older page adds a Disable button to confirm, then a code from your app on the Log in to CloudBees screen. Turning it off removes the app link, so you'd scan a new QR code to turn it back on (CloudBees).
The old Feature Management product
CloudBees Feature Management (formerly Rollout.io, at app.rollout.io) is end-of-life, kept only for customers moving to CloudBees Unify. Its MFA is under your name and avatar, then Account. It uses the same single recovery code, with Regenerate Recovery Codes to make a new one (CloudBees).
