Codebase 2FA: how to set up an authenticator app

Codebase hosts Git, Mercurial and Subversion repositories alongside tickets, time tracking and other project tools, so the account often holds a team's source code. You don't sign in to Codebase directly. Its login page sends you to aTech Identity, a single sign-on service at identity.atechmedia.com, and that's also where two-factor authentication (2FA) lives (Codebase). Codebase is now run by the hosting company Krystal, but the sign-in still carries the aTech name (Codebase).

The only second step Codebase's help describes is a code from an authenticator app on your phone. Its help page doesn't say that 2FA is ever required. Codebase suggests Google Authenticator, but any authenticator app works the same way. This guide uses Authenticator App - Novaz on iPhone.

How we checked this guide: the Codebase steps come from Codebase's own support article, linked below, which we read on October 24, 2026. The article was last updated on July 26, 2024, and most of its screenshots date from 2019. We haven't tested the steps on a Codebase account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Codebase's support article describes this flow (Codebase):

1. Open identity.atechmedia.com and log in with the email address and password you use for Codebase.
2. On the right side of the page, find Security Settings and choose Two Factor Authentication.
3. The page walks you through getting an authenticator app, then shows a QR code. In Novaz, tap +, then Scan QR code, and aim the camera at it. If you're on your iPhone, screenshot the code and add it with Choose a photo. See scanning a QR code on the same iPhone.
4. Type the 6-digit code Novaz shows and click Activate.
5. Codebase then shows a recovery token. Write it down before you leave the page (more on this below).

The article doesn't mention a text key you could type instead of scanning. If you see one, add it in Novaz with +, then Enter key manually, as the Setup key. See What is a 2FA setup key?

Keep the recovery token

The recovery token is your one way back in without your phone, and Codebase is firm that you need to note it. The help page doesn't say whether you can view it again or make a new one later, so treat the first time you see it as the only time. It also doesn't say whether one token works more than once.

Novaz can back up its keys with iCloud backup or a backup file, but without one they exist only on your iPhone, so a lost phone means the token is what lets you recover the account. Keep it in a password manager or on paper, away from the phone. More in 2FA backup codes.

When Codebase asks for a code

From your next login onward, aTech Identity asks for a time-based code after your password. The codes change every 30 seconds (Codebase). The help page doesn't describe trusted devices or a "remember me" option.

If Codebase rejects your code

Codebase's own advice is to check the time on your phone and make sure it's set automatically. On iPhone, that's Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

If you lose your authenticator

Codebase documents a three-step recovery that you start from the sign-in screen itself (Codebase):

1. On the page that asks for your 2FA code, click Recover my account.
2. Codebase emails you a first code. Enter it and click Continue.
3. Enter the recovery token you saved during setup and click Continue.

That resets 2FA on your account, and you'll need to set it up again from the start. So recovery needs both your email inbox and the token. The help page doesn't describe what to do if you've lost the token too. See Lost the phone with your authenticator app?

Changing phones or turning 2FA off

To turn 2FA off, go back to the Two Factor Authentication page in aTech Identity, open your authenticator app, and enter the current code. Codebase says it's switched off right away (Codebase).

Codebase doesn't describe a phone switch. Doing that while you still have the old phone, then setting 2FA up again on the new one, is one way to handle it, and you'll get a new recovery token to save. If you restore a Novaz iCloud backup or backup file on the new iPhone instead, your Codebase codes keep working and you can skip this. See How to transfer your authenticator app to a new iPhone. Once you've moved, remove the old entry in Novaz with Remove account.

Official Codebase help

• Two Factor Authentication
• Codebase - Git, Mercurial and Subversion hosting with project management tools