Skip to content
Novaz AuthenticatorGET

Crypto.com 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Save the setup key: there are no backup codes
  2. Turn on 2FA in the Crypto.com App
  3. Turn on 2FA on the Exchange website
  4. When Crypto.com asks for a code
  5. If Crypto.com rejects your code
  6. Moving to a new iPhone
  7. If you lose your authenticator
  8. Turning 2FA off
  9. Official Crypto.com help

The Crypto.com App and the Crypto.com Exchange share one two-factor authentication (2FA) code, a 6-digit number from an authenticator app that changes every 30 seconds (Crypto.com). The Onchain wallet and Crypto.com NFT each use a separate code, not covered here (Crypto.com, Crypto.com).

Besides the authenticator, the account uses email links and codes, SMS codes, a passcode and passkeys. 2FA is optional in the App, but the Exchange requires it before you can manage withdrawals, deposits and API keys (Crypto.com). Our examples use Authenticator App - Novaz on iPhone, and other authenticator apps follow the same steps.

How we checked this guide: the Crypto.com steps come from Crypto.com's own help center, linked below, which we read on October 20, 2026. Several of those articles were last updated in 2024, and we haven't tested them on a Crypto.com account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Save the setup key: there are no backup codes

Crypto.com's help pages don't mention backup or recovery codes. The Exchange article points to the setup key instead: it appears only once, and you'll need it to reconnect an authenticator later (Crypto.com).

Crypto.com suggests Authy for its cloud backup (Crypto.com). Novaz can back up its keys too, with iCloud backup or a backup file; without one they stay only on your iPhone. Either way, the saved key is a good fallback. Keep it in a password manager or on paper: anyone holding it can generate your codes. See What is a 2FA setup key?

Turn on 2FA in the Crypto.com App

From Crypto.com's App article, last updated in October 2025 (Crypto.com):

  1. Open the menu, then go to Settings > Security > 2-Factor Authentication > Enable 2FA.
  2. Verify with your passkey, or enter your passcode.
  3. The App shows a QR code and a key. Tap the small papers icon to copy the key, and store a copy safely.
  4. The QR code is on the same iPhone, so screenshot it and, in Novaz, tap +, then Choose a photo. Or tap +, then Enter key manually, and paste the key into Setup key. See scanning a QR code on the same iPhone. Delete the screenshot when you're done.
  5. Return to the Crypto.com App, enter your passcode again and tap Proceed to verify.
  6. Type the 6-digit code from Novaz before it changes.

Turn on 2FA on the Exchange website

From the Exchange article, last updated in August 2024 (Crypto.com):

  1. Log in at crypto.com/exchange.
  2. Open your profile, then Security > Account Password and 2FA. Under 2-Factor Authentication, select Enable 2FA.
  3. In Novaz, tap +, then Scan QR code, and aim the camera at the code on your computer. You can also type the key shown on the page with Enter key manually.
  4. Copy the key somewhere safe before you move on.
  5. Type the 6-digit code from Novaz into the code field and select Enable 2FA.

Newer pages call that menu Account Password & 2FA (Crypto.com). Crypto.com doesn't say whether turning 2FA on in one place switches it on in the other, so check both if you use both.

When Crypto.com asks for a code

  • Exchange sign-in by email: after the emailed code, the login page asks for your authenticator code (Crypto.com).
  • App actions, not App sign-in: App login uses a passkey, or an email link, SMS code and passcode (Crypto.com). The 2FA code is for sending crypto to other App users, withdrawals and whitelisting addresses. On a device not marked as trusted, every transaction type needs it (Crypto.com, Crypto.com).
  • Exchange actions: creating API keys, whitelisting addresses and turning off the 24-hour withdrawal lock (Crypto.com, Crypto.com, Crypto.com).

If you add a passkey, it replaces the authenticator code for sign-in, whitelisting and crypto withdrawals (Crypto.com).

If Crypto.com rejects your code

Crypto.com has no help page for rejected codes. Each code lasts 30 seconds, so if one is about to roll over, wait for the next. When codes keep failing, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz shows a warning once the clock drifts by 15 seconds or more. Other fixes are in Authenticator code not working?

Moving to a new iPhone

With iCloud backup or a backup file, you can restore your Novaz accounts on the new iPhone and keep the same codes (how to move to a new iPhone). Without one, if you saved the setup key, add it on the new phone with Enter key manually, as the Exchange article describes (Crypto.com).

If not, reset while the old phone still works: in the App, go to Settings > Security > 2-Factor Authentication, tap Reset 2FA, verify with your passkey or with your passcode and a current code, and add the new QR code to Novaz (Crypto.com). An App reset also affects the Exchange, where Crypto.com asks you to set 2FA up again. Then remove the old entry: open it in Novaz and tap Remove account.

If you lose your authenticator

Try the saved setup key first. Without it:

  • In the App: Reset 2FA still works. A passkey is enough to verify. Without one, you'll need your passcode and an identity check. If the App won't let you reset, Crypto.com directs you to chat.crypto.com (Crypto.com).
  • On the Exchange: contact customer support. You'll record a video showing your face from the front and the side, saying "security verification for Crypto.com" and the full date, and holding the ID you registered with. Once that's verified, an email link brings you back to finish. This turns off 2FA on both the Exchange and the App (Crypto.com, Crypto.com).

Neither page gives a timeframe. Once reset, turn 2FA back on right away, as Crypto.com asks. More in Lost the phone with your authenticator app?

Turning 2FA off

On the Exchange website, go to the Dashboard, click Settings, and on the Security tab select Account Password & 2FA. Turn off the toggle under 2-Factor Authentication, confirm with the email code or link and an authenticator code, and select Disable 2FA. The Exchange App has the same toggle under Home > Settings > Security. Withdrawals may be blocked for 24 hours afterwards (Crypto.com). The App's article covers resetting 2FA, not switching it off.

Official Crypto.com help

More guides: Crypto exchanges and wallets