Coda 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Coda is the doc and workflow tool teams use for wikis, trackers and plans. It's now part of the Superhuman suite (formerly Grammarly), but your Coda account hasn't changed (Coda). Two-factor authentication (2FA) on Coda is optional, and the only method its help describes is an authenticator app. It only works with an email-and-password login, and losing your authenticator means at least two weeks locked out. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Coda steps come from Coda's own help center, linked below, which we read on October 21, 2026. We haven't tested them on a Coda account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start: check how you sign in
Coda lets you sign in with an email and password, Google, Microsoft, Apple, a magic link sent by email, or your company's SSO (Coda). Its 2FA page says two-factor authentication is for email-and-password accounts, and isn't available if you use SSO or Google login. It also says you have to add a password to your account first (Coda). The page doesn't mention Microsoft or Apple sign-in.
If you signed up with a magic link or Google and want 2FA, add a password under Security settings in your account settings. Coda sends a verification email, and after that you can sign in with your email and password (Coda). If your Google login belongs to a company-managed Google Workspace, Coda says to check that your IT policy and Coda admin allow other logins first.
In an Enterprise workspace, your org admin decides which sign-in methods you can use (Coda). Coda has no setting to require 2FA for everyone, and suggests that companies enforce it in their identity provider instead (Coda).
Turn on 2FA with an authenticator app
Coda's help describes these steps (Coda):
- Go to coda.io/account. You can also click your avatar and name in the lower-left corner of any page, then Account settings (Coda).
- Under Security Settings, turn on the Two-step verification toggle.
- Coda shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, then tap + and Choose a photo. See scanning a QR code on the same iPhone.
- Type the six-digit code from Novaz into Coda.
Coda's help doesn't mention a text key you can type instead of scanning, so plan to scan the QR code. If Coda does show a key, in Novaz tap +, then Enter key manually, and type it as the Setup key (What is a 2FA setup key?).
When Coda asks for a code
From the next time you sign in, Coda asks you to verify with your authenticator app. Its help doesn't say whether trusted devices are remembered.
No backup codes
Coda's help doesn't mention backup or recovery codes, or a second 2FA method. So if your iPhone is lost and you have no Novaz backup (iCloud backup or a backup file) to restore, the only way back in is Coda Support and its waiting period (below). Keep access to the email address on your Coda account.
If Coda rejects your code
Coda's help doesn't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Coda's advice is to turn off 2FA with your old device before you get rid of it (Coda). Turn it off while the old iPhone still shows codes, then turn it back on and scan the new QR code with the new phone. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Without backup codes, you need Coda Support to reset 2FA for you (Coda, Coda):
- Contact Support. If you're still signed in somewhere, click the question mark in the lower-right corner of any doc and choose Contact support. If you're signed out, email support@coda.io.
- Coda emails you to confirm the reset request. Once you confirm, Coda warns that "you will be locked out of your account for 14 days." You can contact Support to cancel the request at any time during those 14 days.
- A second email tells you the hold has started. After the 14 days, a last email confirms the reset, and you can sign in with your email and password again.
Then set up 2FA again with your new phone. Coda's help doesn't say what proof it asks for beyond confirming by email. More in Lost the phone with your authenticator app?
Turning 2FA off
In your account settings, turn off the Two-step verification toggle. Coda asks for a code from your authenticator app to confirm (Coda). Afterwards, you can remove the Coda entry in Novaz: open it and tap Remove account.
