Kit (formerly ConvertKit) 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Kit is the creator email platform that used to be called ConvertKit; old ConvertKit help links now open on Kit's help center. Your Kit login controls your subscriber list, your broadcasts and anything you sell there.
Kit calls two-factor authentication multi-factor authentication (MFA), and it's optional. Without it, Kit checks logins from a device, browser or IP address it doesn't recognize by emailing you a link titled New login to your Kit account (Kit). With MFA on, those emails stop and you type a code instead. There are two methods, an authenticator app and SMS, and you can turn on either one or both (Kit).
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Kit steps come from Kit's own help center articles, linked below, which we read on October 20, 2026. We haven't tested them on a Kit account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
These steps come from Kit's setup article, updated October 20, 2026. Its text and screenshots use slightly different labels, so we give both (Kit).
- Sign in to Kit. Click Settings in the lower-left corner, then Login details (another Kit article spells it Login Details).
- Scroll to Multi-Factor Authentication (the screenshot shows Multi-factor authentication settings).
- Turn on the Authenticator app switch.
- A window titled Enable multi-factor authentication opens with a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If scanning doesn't work, Kit shows a text code under the QR code, with a copy button. In Novaz, tap +, then Enter key manually, type Kit under Service and paste the code as the Setup key. See What is a 2FA setup key?
- Continue (the screenshot shows Next), type the current code from Novaz, and confirm. The article names the button Enable Verification.
When it works, the Authenticator app switch shows as on, and Kit lists the date you last logged in with that method.
Kit doesn't say how many digits its codes have or how often they change. The QR code carries those settings, so scan it if you can and type the key only as a fallback.
SMS is the backup Kit documents
We found no Kit help page that mentions backup or recovery codes. What Kit offers is a second method. If you turn on both the authenticator app and SMS, Kit asks for the app code when you log in, but lets you request a text message code instead (Kit).
Without a Novaz backup, its keys exist only on your iPhone, so adding your phone number as the second method gives you a way in if that iPhone is lost. Text messages are weaker than app codes (see authenticator app vs SMS), but here they're the only documented safety net.
One exception: Kit says it can't guarantee SMS delivery to numbers in the United Arab Emirates (country code +971), and asks people there to use an authenticator app.
When Kit asks for a code
Kit asks for the code when you log in. Its help doesn't say whether that's every time or whether a browser can be remembered.
On a team, each person has their own login, and even an Editor can change their own login details (Kit). That's where the MFA switches are, so each person protects their own login. Kit doesn't describe a way for the owner to make MFA required.
If Kit rejects your code
Kit's help has no advice on rejected codes. Check two things:
- An old entry. Each time you set up an authenticator for Kit, codes from any earlier setup stop working (Kit). If you've done it more than once, use the newest Kit entry in Novaz and remove the others: open the account and tap Remove account.
- The clock. On your iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off.
More causes are in Authenticator code not working?
Changing phones
If you use iCloud backup or a backup file in Novaz, restore your accounts on the new iPhone and Kit's codes keep working. Otherwise, set Kit up again on the new phone while you can still sign in, from the same section under Login details. Once the new setup is done, the old codes stop working. Kit doesn't spell out whether you switch the authenticator off first. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
If you also turned on SMS, request a text message code at login, then set up the authenticator again on your new phone.
Without SMS, Kit's help doesn't describe a recovery process or what proof it asks for. Its general route is support: email help@kit.com with your account email address and a description of the problem. Kit says support runs 24/7 and usually replies within 24 hours (Kit). The in-app messenger is the other channel, but you need to be signed in to use it. More in Lost the phone with your authenticator app?
Turning 2FA off
In the same section, switch the method you no longer want to Off (Kit). With MFA off, Kit goes back to device authentication emails for unfamiliar logins.
