Skip to content
Novaz AuthenticatorGET

CoinJar 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on Enhanced Security with an authenticator app
  2. Add a second authenticator
  3. When CoinJar asks for a code
  4. If CoinJar rejects your code
  5. Changing phones
  6. If you lose your authenticator
  7. Turning it off
  8. Official CoinJar help

CoinJar is a cryptocurrency wallet for buying, storing and sending crypto, and the same verified account also opens CoinJar Exchange, its trading platform (CoinJar). In CoinJar's settings and help pages, two-factor authentication goes by the name Enhanced Security. It's optional for signing in, but CoinJar asks for it before it completes high-risk transfers (CoinJar).

You can use an authenticator app or text messages, and you can link more than one of each. CoinJar's help doesn't mention backup codes, so a second authenticator is the backup it describes. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the CoinJar steps come from CoinJar's own help center, linked below, which we read on October 22, 2026. The article pages refused plain automated requests, so we read their text through the help center's public article feed on support.coinjar.com. An archived copy of the main article from February 2026 used older labels, so we followed the current text. We haven't tested the steps on a CoinJar account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on Enhanced Security with an authenticator app

CoinJar's current setup steps, last edited in June 2026 (CoinJar):

  1. Sign in to CoinJar and open the More tab, then Security. On the web, that page is at app.coinjar.com/more/security.
  2. Select Enhanced Security (2FA), then click Add New Device.
  3. Choose Authenticator app. CoinJar shows a QR code.
  4. In Novaz, tap +, then Scan QR code, and point the camera at the code. If CoinJar is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
  5. When CoinJar asks, type the 6-digit code that Novaz shows for CoinJar.

CoinJar's article doesn't mention a text key to type instead of scanning, so plan to scan the QR code. It does say the codes change every 30 seconds, which matches what Novaz makes.

Older copies of the same article used different labels, such as Add additional 2FA authenticator and TOTP. If your screen still shows those, they lead to the same setup.

Add a second authenticator

CoinJar lets you add more authenticators, and each one has "the same power as your initial Enhanced Security authenticator" (CoinJar). That means any of them can sign you in. CoinJar suggests a second one so you still have a way in if your usual method is lost, and it also points out that every extra authenticator is one more way into the account.

Unless you turn on iCloud backup or keep a backup file, Novaz keeps its keys only on your iPhone. If Novaz is your main authenticator, a second one is worth adding: another authenticator app on a different device, or a text-message device. Add it the same way, with Add New Device, and choose SMS device for text messages. CoinJar warns that text codes are slower and less secure, and they can fail when you travel. More in Authenticator app vs SMS.

When CoinJar asks for a code

Signing in takes up to three steps (CoinJar):

  • your email address and password;
  • on a device CoinJar hasn't seen, a link in an email titled Approve your recent CoinJar sign in;
  • a code from one of your Enhanced Security authenticators.

On the code screen you can tick Remember this browser for 2 weeks to skip the code on that browser for 14 days. If CoinJar asks for an authenticator you don't have with you, select More options and pick another one.

CoinJar also supports passkeys, under More > Security > Passkeys in the app. A passkey can stand in for the email approval on a new device. It doesn't replace your password (CoinJar).

If CoinJar rejects your code

CoinJar's troubleshooting article puts the phone's clock first (CoinJar). Make sure the time and time zone are correct and set automatically. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. CoinJar adds that switching to a manual time and back to automatic can clear a sync problem. Novaz warns you when the clock is 15 seconds or more off.

The same article lists deleting and reinstalling the authenticator app as a last resort. Don't do that with Novaz unless you have a current iCloud backup or backup file: without one, you could lose every account in it. More causes are in Authenticator code not working?

Changing phones

Do it while the old phone still works. Add the new iPhone first with Add New Device, check that its code signs you in, then remove the old one (CoinJar):

  1. In the More tab, go to Security, then Enhanced Security (2FA).
  2. Select the old authenticator, then Remove device.
  3. Complete one more code check to finish.

If you have a Novaz iCloud backup or backup file, restoring it on the new iPhone brings the same CoinJar entry back, so you can skip these steps. Without one, the new phone needs a fresh setup as above. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

If you have a second authenticator, sign in with it through More options, then remove the lost one as above and add a replacement soon.

If you can't complete Enhanced Security with any authenticator, CoinJar's Security Team has to remove it by hand. Submit a support request or email support@coinjar.com (CoinJar). The sign-in help calls this an Enhanced Security Removal Request (CoinJar). You can still reach the Support Portal without passing 2FA.

CoinJar doesn't list the proof it asks for or say how long removal takes. It does say its staff never ask for documents, personal details or Enhanced Security codes by email or in a support request. They use dedicated secure forms (CoinJar). If a message asks for them, CoinJar wants you to report it with a new support request. More in Lost the phone with your authenticator app?

Turning it off

CoinJar documents removing one authenticator at a time, with Remove device. Its help doesn't say whether you can remove the last one yourself, and it urges you to keep at least one.

Official CoinJar help