CoinMarketCap 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your CoinMarketCap account holds your watchlists, portfolio and community profile. Two-factor authentication (2FA) is optional, but CoinMarketCap urges you to turn it on, most recently after public profile data was scraped in April 2026 (CoinMarketCap, CoinMarketCap). The account security page lists two methods: Google Authenticator (2FA) and E-mail address verification (2FA) (CoinMarketCap).
Despite the name, the first is a normal authenticator-app option: the screens mention only Google's app, but any authenticator app can scan the QR code. This guide uses Authenticator App - Novaz on iPhone, and other apps work the same way.
How we checked this guide: the CoinMarketCap steps come from CoinMarketCap's own help center, its Account Security settings page and its official statements, linked below, which we read on October 20, 2026. No help article walks through the authenticator setup, so the screen titles and labels come from the text of the settings page itself. The support form blocks automated access, so we read it in an archived copy. We haven't tested any of this on a CoinMarketCap account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Use the website, ideally on a computer. CoinMarketCap's help page on the mobile app's settings doesn't list any security options (CoinMarketCap).
- Sign in at coinmarketcap.com, click your avatar in the top-right corner, choose Settings, and open Account Security Settings (CoinMarketCap). The page itself is headed Account Security.
- Under Security settings, find Google Authenticator (2FA) and click Enable (CoinMarketCap).
- Skip the download offer on Get the Google Authenticator app: click Next.
- Set up your Google Authenticator account shows a QR code with a key below it. In Novaz, tap +, then Scan QR code. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead (see scanning a QR code on the same iPhone). Click Next.
- Save this Backup Key in a secure location shows the same key again. Save it (see below) and click Next.
- On Verify Google Authenticator account, type the 6-digit code from Novaz under Enter Authenticator verification code. If your account has an email address, there's a second box for an email code: click Get Code and type what CoinMarketCap emails you. Don't mix up the two codes. Click Next.
- On Google Authenticator is now set up, click Back to Account Security. The status should now read on.
To type the key instead, tap +, then Enter key manually in Novaz, and paste the Backup Key as the Setup key. CoinMarketCap doesn't say how long its keys are or how often codes change. Novaz needs at least 16 characters for a typed key and always makes 30-second codes from it, so scanning is safer. See What is a 2FA setup key?
Save the Backup Key
CoinMarketCap's screens don't mention one-time recovery codes. Instead, the setup screen says the Backup Key lets you recover your authenticator after losing your phone. Without it, "resetting Google Authenticator will take at least 7 days" (CoinMarketCap).
Unless you've turned on iCloud backup or exported a backup file, Novaz keeps its keys only on this iPhone, so this key is what gets you back in. It's worth keeping even with a Novaz backup, in case that backup is out of date. Store it in a password manager or on paper, away from the phone. Anyone who has it can make your codes.
If CoinMarketCap rejects your code
CoinMarketCap publishes no advice on rejected codes beyond a link to Customer Service on the settings page. First check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
While you still have the old phone, open Account Security and click Change next to Google Authenticator (2FA), then Confirm. After you verify with a code from your current app (plus an email code if asked), CoinMarketCap shows a new QR code and Backup Key for the new phone (CoinMarketCap). Save the new key in place of the old one.
If you use iCloud backup or a backup file in Novaz, you can restore your accounts on the new iPhone instead, and the codes keep working without a new QR code. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
- You saved the Backup Key: add it to Novaz on your new iPhone with Enter key manually (the limits above apply).
- You also have email verification on: the code screen has a Verify with e-mail link under Still can’t get code? (CoinMarketCap). CoinMarketCap doesn't explain when that works, so don't rely on it.
- Neither works: use the Customer Service link on the settings page. It opens the request form 12 - Feedback, Questions, Complaints, which asks for your account's email address (CoinMarketCap, archived copy). CoinMarketCap doesn't say what other proof it needs. Expect a reset to take at least 7 days.
CoinMarketCap says it never asks for your password or a verification code, so treat any message that does as phishing (CoinMarketCap). More in Lost the phone with your authenticator app?
Turning 2FA off
On Account Security, click Remove next to Google Authenticator (2FA), then Confirm past the security warning, enter an authenticator code (plus an email code if asked), and click Remove (CoinMarketCap). After Google Authenticator removed appears, open CoinMarketCap in Novaz and tap Remove account.
