Cordial 2FA: how to set up an authenticator app

Cordial is a marketing platform that companies use to send email, SMS and app messages, so a Cordial login usually belongs to someone on a marketing team. Cordial calls its two-step sign-in multi-factor authentication (MFA), and it works with one method only: a time-based code from an authenticator app, typed after your password (Cordial).

For many users MFA is no longer a choice. Cordial's June 2026 release notes say MFA became required for all users, and that you're taken through setup when you sign in, before you reach the platform (Cordial). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Cordial steps come from Cordial's own help center, linked below, which we read on October 21, 2026. The help center pages show a bot check to automated readers, so we read the same articles through the help center's public, no-login article feed on support.cordial.com. We haven't tested them on a Cordial account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Who has to use it

• Password users: if your company's account requires MFA, you'll meet the setup screen the next time you sign in.
• Single sign-on (SSO) users: since July 2026, an account that requires MFA can also turn on Limit MFA Requirement to Password Users next to Require MFA for All Users. Then people who sign in through the company's identity provider skip Cordial's MFA setup. Your customer success manager (CSM) turns this on (Cordial).

The two notes don't quite agree: June says everyone, while July treats it as an account setting. If you aren't prompted at sign-in, turn it on yourself in your profile. Cordial strongly recommends it either way (Cordial).

Turn on 2FA with an authenticator app

If Cordial walks you through setup at sign-in, the screens should match steps 3 to 5. To start from your profile instead (Cordial):

1. Sign in to Cordial and open Settings > Profile Settings.
2. Under Multi-factor Authentication, click Edit, then select Enabled.
3. Cordial shows a QR code and a setup key. Don't click Enable a second time from here on: Cordial warns that a second click voids that QR code and key, and you'd have to start again.
4. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
5. Can't scan? In Novaz, tap +, then Enter key manually. Type "Cordial" as the Service, your work email as the Account, and the setup key as the Setup key. The key goes into Novaz only, never into a box on the Cordial page. See What is a 2FA setup key?
6. Novaz shows a 6-digit code for Cordial. Type it into Enter code from device and click Confirm. Cordial's article stresses that this button is Confirm, not Enable.

Cordial's codes are 6 digits and change every 30 seconds, which is what Novaz uses for a typed key too, so either route works.

Signing in afterwards

Cordial asks for a code every time you sign in. Enter your email and password, open Novaz, type the current Cordial code and click Validate Code (Cordial). Cordial doesn't mention trusted devices or a way to skip the code on a familiar computer.

Admins can see who has MFA on: Settings > Users has an MFA column showing each user as enabled or disabled. An admin can't turn MFA back on for someone else, though. If a user's MFA was disabled, that user has to turn it on again from their own settings.

No backup codes

Cordial's MFA article doesn't mention backup or recovery codes or a second method. Its only documented way back in is a reset by Cordial support (below). Unless you turn on iCloud backup or export a backup file, Novaz keeps its keys only on your iPhone, so that phone is your only source of Cordial codes.

If Cordial rejects your code

If codes keep failing, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when your clock is 15 seconds or more off.

During setup, a code that fails right after you clicked Enable twice is probably for a QR code Cordial has already replaced. Remove that entry in Novaz (open it and tap Remove account), start the setup again, and scan the new code. More causes are in Authenticator code not working?

Lost your phone or getting a new one

Cordial's route is a support ticket asking for an MFA reset, with the email address of the user who's locked out (Cordial). You can email support@cordial.com or use the ticket form. For non-urgent tickets, Cordial aims to reply within 24 hours during business hours, 8 am Eastern to 5 pm Pacific; put URGENT in the email subject, or pick Urgent in the form, if you're blocked from work (Cordial). Cordial doesn't say what proof it asks for.

There's no self-service move to a new phone in Cordial's help. In Novaz, iCloud backup or a backup file restores your accounts on a new iPhone, Cordial included. Without one, on a new phone you'll need the reset, then set up the authenticator again when Cordial prompts you. Keep the old phone until you're back in. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

Cordial doesn't document how a user turns MFA off, and on accounts that require it, you shouldn't expect to.

Official Cordial help

• Multi-factor authentication
• Profile Settings
• Security best practices
• June 2026 (release notes)
• July 2026 (release notes)
• Submit a support ticket