Constellix 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Constellix, the DNS and monitoring service that is now a DigiCert company (Constellix), uses one sign-in for DNS, Sonar, Analytics and Billing. Two-factor authentication (2FA) there belongs to each user, not the company account. You switch it on in your own profile, and the setup hands you a single emergency key instead of a list of backup codes (Constellix). An authenticator app is the only 2FA method Constellix's help pages describe. Teams that sign in with SAML through their company's identity provider do their second step there instead (Constellix).
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Constellix steps come from Constellix's own help center, including the screenshots in its articles, which we read on October 20, 2026. We haven't tested them on a Constellix account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Can your company require it?
Yes. An administrator can open Manage Account and, under Security Settings, set Two-Factor Authentication to Required or Not Required, then click Submit. Constellix says the change applies at once, and that a required setting covers every user in the account (Constellix). The Manage Users page has a 2FA/Multi-Factor column, so admins can check who has set it up (Constellix).
With SAML, Constellix suggests keeping one admin who signs in without it, for identity provider outages, and protecting that user with strong MFA (Constellix).
Constellix's user article lists one prerequisite: your administrator has to allow 2FA (Constellix). Its pages don't say what a regular user sees when it isn't allowed, so if the option below is missing, ask your account's admin.
Turn on 2FA with an authenticator app
These steps follow Constellix's article on enabling 2FA (Constellix):
- Sign in to Constellix. On the Constellix website, the Login menu has a User Management entry for the management console (Constellix).
- Click Manage Profile in the left-hand menu, or Edit profile under your name at the top of the dashboard.
- Click Activate Multi-Factor Auth in the menu on the left of your profile.
- A Multi-Factor Activation window shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Can't scan? Constellix's screenshot shows an unlabeled text key above the QR code. In Novaz, tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key? Constellix doesn't state its code length or interval, so the QR code is the safer route.
- Type the current code from Novaz in the Enter Code field and click Verify.
- A Success message appears with your Emergency Key. Copy it with the button beside it, store it somewhere safe, then click Done.
From then on, your profile menu offers to deactivate 2FA instead of activating it.
Keep the emergency key safe
You get one emergency key, not a set of codes. The warning in the setup window says it's what you'd use to turn off two-factor if you can't reach your authenticator (Constellix). The help pages don't explain where you enter it, whether it works more than once, or how to get a new one.
That key is your way back in if the phone is gone and you have no up-to-date Novaz backup (iCloud backup or a backup file); without one, Novaz keeps its keys only on your iPhone. Put the emergency key in a password manager or on paper, away from your phone. More in 2FA backup codes.
Signing in with 2FA
Sign-in has two pages. You enter your username and click Next, then your password and your 2FA code, and click Next again. Without 2FA, that second page only asks for the password (Constellix). No remembered-device option is mentioned, so expect to need a code each time.
If Constellix rejects your code
Constellix's help pages don't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Moving to a new phone
Constellix doesn't document moving 2FA to another phone. In Novaz, iCloud backup or a backup file restores your accounts on the new iPhone, so the codes keep working. Without one, the route with the controls Constellix does document is to deactivate 2FA while you still have the old phone, then activate it again and scan the new QR code on the new one. If your admin requires 2FA, ask them first: Constellix doesn't say whether you can switch it off in that case. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Use your emergency key: the setup window says it's for turning off two-factor when you can't reach your authenticator. Constellix's help center describes no other recovery process, no admin reset, no proof it asks for, and no time frame. If you're stuck, its general support address is support@constellix.com (Constellix). More in Lost the phone with your authenticator app?
Turning 2FA off
In Manage Profile, click Deactivate Multi-Factor Auth (the screenshot shows it as Deactivate Multi-Factor), then confirm with the red Deactivate button. The menu goes back to Activate Multi-Factor Auth (Constellix). After that, open the Constellix entry in Novaz and tap Remove account.
