Coinbase 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Two-step verification (2FA) isn't optional on Coinbase: you need it to get into the account at all. What you choose is the method, and the default is text messages, which Coinbase itself rates as the least secure (Coinbase). This guide shows how to add an authenticator app to the Coinbase account you use on Coinbase.com and in the Coinbase app. The steps use Authenticator App - Novaz on iPhone. Coinbase says it "supports all authenticator apps", so the steps are the same with any of them (Coinbase).
How we checked this guide: the Coinbase steps come from Coinbase's own help pages, linked below. Coinbase's help center blocks automated access, so on October 20, 2026 we read archived copies of those pages on web.archive.org, captured between April and October 2026. We haven't tested the steps on a Coinbase account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
What Coinbase offers
Coinbase also offers security keys, passkeys and push notifications to its app. The pairs it recommends are two security keys, a passkey plus a security key, or a passkey plus push notifications (Coinbase). The authenticator app isn't on that list, but it's supported and a clear step up from texts (authenticator app vs. SMS). 2FA itself can't be turned off, but each method can be switched on or off in the 2FA settings.
Turn on 2FA with an authenticator app
Coinbase's help says to do this in a web browser (Coinbase):
- Sign in to Coinbase's 2-step verification settings page in a browser, ideally on a computer.
- Under Available Methods, select Set up next to Authenticator app.
- Follow the prompts. Coinbase's help doesn't describe these screens, so it doesn't say whether you'll get a QR code, a key, or both.
- If you see a QR code, open Novaz, tap +, then Scan QR code, and point the camera at the screen. If the browser is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If you're given a key instead, tap +, then Enter key manually. Type Coinbase as the Service, your email as the Account if you like, and the key as the Setup key. See What is a 2FA setup key?
- When Coinbase asks for a code, type the one Novaz shows for Coinbase.
Coinbase doesn't publish how many digits its codes have or how often they change, or whether text messages stay on after you add the app. If a QR code is on offer, scan it rather than typing the key, because the QR code passes the code settings to the app.
Keep a second method
Coinbase's current help pages don't mention backup or recovery codes. Instead, Coinbase suggests setting up more than one method, so losing one doesn't lock you out (Coinbase). If a method doesn't work at sign-in, choose Try another way to switch.
This matters with Novaz too: unless you turn on iCloud backup or keep a backup file, its keys exist only on your iPhone. A passkey or a security key next to the app is your backup if that phone is lost or broken.
Trusted contacts are another option, for recovery only: 2 to 5 people you invite by email, who can approve an account recovery but not a sign-in. Coinbase warns that anyone who asks to be your trusted contact is probably a scammer (Coinbase).
When Coinbase asks for a code
Every new sign-in needs 2FA. For crypto sends, Coinbase asks only on some higher-value transactions, not on routine ones, and it now sets this by default (Coinbase).
On a new device, Coinbase also emails you a Verify this device button. That's device confirmation, separate from 2FA (Coinbase).
If Coinbase rejects your code
Coinbase's troubleshooting page covers a lost authenticator app but not a code that's refused (Coinbase). Start with the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Coinbase's help doesn't explain how to move the authenticator app to a new phone. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone. Without one, switch while the old phone still works, with a second method such as a passkey already in place. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
If you have another method, use it to sign in (Coinbase). If the app was your only method, Coinbase's account recovery works like this (Coinbase):
- Go to the account recovery page and enter your email address and password. No password, or forgot it? Reset it first.
- Choose Upload your ID to sign in, or Request trusted contacts approval if you set up trusted contacts.
- Follow the rest of the prompts.
ID recovery takes up to 24 hours, and you may not be able to send funds for 24 hours after it's done. Once you're back in, Coinbase asks you to update your 2FA method within 24 hours.
You may also see Receive an email. Coinbase warns that this option deletes your saved payment methods and won't let you change your email address or 2FA afterward.
Still signed in somewhere? On the 2FA settings page, select Get started under Lost access to your 2-step verification?. If you can't reach recovery at all, Coinbase says the account may be locked as compromised, and to contact it. More in Lost the phone with your authenticator app?
