CookieYes 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
CookieYes runs cookie consent banners: your account holds your websites, grouped into organizations, and the team members you invite (CookieYes). Two-factor authentication (2FA) is optional, and CookieYes documents only one kind: six-digit codes from an authenticator app, backed by a set of recovery codes (CookieYes). Its documentation mentions no text-message option and no plan that requires 2FA.
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app that makes time-based codes works the same way.
How we checked this guide: the CookieYes steps come from CookieYes's own documentation, including its screenshots, linked below, which we read on October 20, 2026. CookieYes last updated its 2FA page on August 5, 2024, and its text and screenshots don't always use the same labels, so what you see may differ slightly. We haven't tested the steps on a CookieYes account. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
The setting sits next to your password (CookieYes):
- In the CookieYes dashboard, click the profile icon in the top-right corner and choose My Account from the menu.
- On the My account tab, go to Security. Under Two-factor authentication (2FA), click Set up 2FA.
- A window called Set up two-factor authentication (2FA) opens with a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- Below the QR code, CookieYes also shows a setup key with a copy button. To use it instead, tap + in Novaz, then Enter key manually, fill in Service, and paste the key into Setup key. See What is a 2FA setup key?
- In the field marked Enter the 6-digit code, type the code Novaz shows for CookieYes and click Verify code. (The page text spells it Verify Code.)
- The next screen shows your 2FA recovery codes. Click Copy and store them somewhere safe. Then tick I've securely saved my 2FA recovery codes. and click Okay.
CookieYes says any app that supports time-based one-time passwords will work, and names Google Authenticator, Microsoft Authenticator, Authy and LastPass Authenticator as examples. It doesn't say how often codes change, so scanning the QR code is the safer choice: it carries those settings to Novaz, while a typed key always gets 30-second codes.
The documentation doesn't describe a way for an account owner to require 2FA for team members.
Your recovery codes are the backup
CookieYes's confirmation screen says the recovery codes let you sign in if you lose your device, and that each one works only once (CookieYes). Without iCloud backup or a backup file, Novaz keeps its keys only on your iPhone, so these codes are your way back in. Keep them away from that phone, in a password manager or on paper. More in 2FA backup codes.
To get a new set, go to My Account > Security and click Re-generate recovery codes. Enter your password and click Re-generate recovery codes again. The window suggests this if your codes may be lost, exposed or expired. CookieYes doesn't say when codes expire or whether old ones stop working, so replace your saved copy.
When CookieYes asks for a code
The setup window describes 2FA as "an additional security step each time you log in to your account" (CookieYes). The documentation doesn't mention trusted devices or skipping the code on a browser you use often. Regenerating recovery codes and turning 2FA off ask only for your password, as documented, so a strong, unique password still matters.
If CookieYes rejects your code
CookieYes's 2FA page has no troubleshooting advice. The most common cause is the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
CookieYes doesn't document moving 2FA to a new phone. The steps it does document give you a route while you can still sign in: click Disable 2FA under Security, then Set up 2FA again and scan the new QR code with the new iPhone. Save the recovery codes from the new setup. If you use iCloud backup or a backup file in Novaz, you can restore your accounts on the new iPhone instead. Without one, do this before you wipe the old one. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your recovery codes, then turn 2FA off and set it up again on your new phone. CookieYes's documentation doesn't show where the sign-in screen accepts a recovery code.
Without recovery codes, CookieYes doesn't publish a recovery process, the proof it asks for, or how long a reset takes. Its contact page points to support@cookieyes.com and asks you to include your website's URL (CookieYes). Its support page also links a request form under Get support, which asks for your email address and website URL (CookieYes). More in Lost the phone with your authenticator app?
Turning 2FA off
Go to My Account > Security and click Disable 2FA. In the window titled Disable two-factor authentication (2FA)?, enter your CookieYes password and click Disable 2FA (CookieYes). The window warns that you'd have to go through setup again to turn it back on. Then open CookieYes in Novaz and tap Remove account.
