CoinTracking 2FA: how to set up an authenticator app

CoinTracking, at cointracking.info, is a portfolio tracker and crypto tax tool from Munich. It isn't CoinTracker (cointracker.io), a different company with its own 2FA steps, so check which one you use (CoinTracking). CoinTracking holds no coins, but it does hold your trade history and exchange API connections. Its 2FA is optional, and it works with authenticator apps such as Google Authenticator or Authy (CoinTracking). Its help pages mention no SMS or email codes for 2FA. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the CoinTracking steps come from CoinTracking's own help center and security page, linked below, which we read on October 21, 2026. Those pages say where the setting is but don't walk through the setup screens. We haven't tested them on a CoinTracking account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

The one thing to know first

CoinTracking calls it a backup code, but it works like a setup key. If you lose your phone, CoinTracking's help tells you to type the backup code into any 2FA app to get your codes back (CoinTracking). That only works if you saved it when you set up 2FA. So write it down then, and keep it somewhere other than your phone.

Turn on 2FA with an authenticator app

1. Sign in at cointracking.info in a web browser. CoinTracking signs you in with your username, not your email address, and usernames are case-sensitive (CoinTracking).
2. Open your account settings. In the General Settings section, find Two-Factor Authentication (2FA) and turn it on (CoinTracking).
3. Add CoinTracking to Novaz. If CoinTracking shows a QR code, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
4. Save the backup code and store it safely. CoinTracking's help doesn't say where on the setup screen it appears. If you'd rather type it than scan, tap +, then Enter key manually, and enter it as the Setup key. Novaz takes a base32 key of at least 16 characters for manual entry. See What is a 2FA setup key?
5. Finish with the code from Novaz if CoinTracking asks for one.

CoinTracking's help doesn't describe the screens after step 2, so the exact buttons there aren't documented. When 2FA is on, the account settings show it as verified. The Security Settings section also has a 2FA Status line that tells you whether it's on (CoinTracking).

Other sign-in checks

CoinTracking's pages don't say when it asks for the 2FA code. Separately from 2FA, it can block an account for a while when you sign in from a new device. You then get a blockage code to send to support (CoinTracking). Repeated failed sign-ins can also lock you out by IP address until support unlocks it. So if a sign-in fails after the 2FA code, read the message before you try again.

If CoinTracking rejects your code

CoinTracking's help doesn't cover rejected codes. The usual cause is the iPhone's clock: go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Too many failed tries can lock the account, so fix the clock before you keep trying. More in Authenticator code not working?

Changing phones

CoinTracking doesn't document a way to move 2FA to a new phone. If you use iCloud backup or a backup file in Novaz, restoring it on the new iPhone brings CoinTracking along. Otherwise your saved backup code is the simple route: add it to Novaz on the new iPhone with Enter key manually. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

With the backup code, add it to Novaz or any other authenticator app and sign in as usual.

Without it, open a support ticket or email support@cointracking.info. CoinTracking asks for the following before it removes 2FA by hand (CoinTracking):

• your username,
• when you created the account,
• the exchanges you use most, and
• three coins in the account with their rough balances.

If that isn't enough, CoinTracking may accept a receipt for a payment: the method, the date and amount, and the transaction number or IBAN. It doesn't say how long the check takes. Support answers in English and German only. CoinTracking will never phone you or ask for your password, so a caller who says they're from CoinTracking is a scammer (CoinTracking).

You can sign up for CoinTracking without an email address (CoinTracking). If you did, these answers are your only way back in without the backup code. See Lost the phone with your authenticator app?

Turning 2FA off

CoinTracking's help doesn't describe turning 2FA off yourself. Its documented route to remove 2FA is the support check above.

Official CoinTracking help

• CoinTracking Account Settings
• How to Recover your Account (Forgot Password, Email or 2FA device)
• Security
• CoinTracking security measures