Dashlane 2FA: how to set up an authenticator app for your Dashlane account
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Dashlane account holds every password you've saved, so it's worth guarding well. Even without two-factor authentication (2FA), Dashlane emails you a 6-digit code when you log in on a new device or browser. Turning on 2FA replaces that email code with a token from an authenticator app, and you can choose to be asked at every login (Dashlane).
2FA is optional on personal plans, though Dashlane recommends it in its advisory about a 2026 brute-force attack on new-device logins (Dashlane). On a professional plan, an admin can require it with the Enforce 2-factor authentication (2FA) policy (Dashlane). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Dashlane steps come from Dashlane's own help center and blog, linked below, which we read on October 20, 2026. We haven't tested them on a Dashlane account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Which app should hold the Dashlane token
Dashlane's built-in Authenticator tool is for the other logins in your vault (Dashlane). For the Dashlane account, its help points you to an authenticator app on your phone, and its blog says the feature works "through a third-party authenticator app" (Dashlane, Dashlane). We found no explicit warning against storing this token in Dashlane. But Dashlane does say to keep your recovery key outside it, because you need the key when you're locked out (Dashlane). Treat the token the same way.
Turn on 2FA with an authenticator app
You can only turn 2FA on in a computer browser, logged in through the Dashlane extension (Dashlane). The mobile and macOS apps can't, though they ask for the token afterwards. Passwordless accounts, and work accounts that use single sign-on (SSO), don't have the setting (Dashlane).
- Log in to Dashlane in your computer browser.
- Open the Vault menu at the top left, select Settings, then Security settings, and turn on 2-factor authentication. If asked, enter your Master Password and select Next.
- Choose whether Dashlane asks at every login or only on new devices (see below), and select Continue.
- Enter your mobile number for texted recovery codes and select Continue. Dashlane can't text numbers from Singapore, Curaçao or the Dominican Republic (Dashlane).
- Dashlane shows a QR code and a setup code. In Novaz, tap +, then Scan QR code, and point the camera at your computer screen.
- If you can't scan it, type the setup code instead: in Novaz, tap +, then Enter key manually, and fill in Service, Account (optional) and Setup key. See What is a 2FA setup key?
- In the browser, select Continue if the QR code is still showing, type the 6-digit token from Novaz, and select Confirm.
- Download the recovery codes, store them safely, and select Done.
The tokens have 6 digits and generally change every 30 seconds, as Novaz expects for a typed key.
Every login, or new devices only
- New devices only: a token the first time you log in on a new phone, computer or browser, in place of the email code.
- Every login: a token each time, an internet connection to open your account, and no Keep me logged in for 14 days option (Dashlane, Dashlane).
To change this choice or the phone number, turn 2FA off and on again (Dashlane).
Recovery codes are your backup
Without iCloud backup or a backup file, Novaz keeps its keys only on your iPhone, so Dashlane's recovery codes are your way back in if that iPhone is gone. Keep them on a different device from your authenticator, as Dashlane asks. Each code is 16 characters, and you always need two: one to log in, one to turn 2FA off. Turning 2FA off and on again replaces them (Dashlane, Dashlane).
They're not the 28-character account recovery key, which is for a forgotten Master Password. More in 2FA backup codes.
If Dashlane rejects your code
Dashlane suggests these checks (Dashlane):
- Enter the token Novaz shows right now, without typos.
- Both devices, the iPhone with Novaz and the one you log in on, should set date, time and time zone automatically. On iPhone: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off.
- Update Dashlane and the extension, check your connection, and restart.
If the security check won't load, turn off ad blockers and VPNs. More causes in Authenticator code not working?
If you lose your authenticator
With your recovery codes, on the web (Dashlane):
- At the token screen, select Log in another way, then Use a 2FA recovery code. Enter a code, select Log in, then enter your Master Password.
- In Security settings, turn off 2-factor authentication, select Yes, turn off, then Use a recovery code. Enter a second code and select Confirm.
- Turn 2FA on again with your new phone and save the new codes.
The same article has iPhone app steps, starting from Trouble signing in, though an older page says recovery codes only work on the web (Dashlane). If the app doesn't offer them, use a browser.
Without recovery codes (Dashlane):
- Get two new codes by text to your setup number: select Log in another way > Reset 2FA > Get recovery code > Use recovery code. The first code logs you in, the second turns 2FA off.
- On a professional plan that enforces 2FA, your admin can generate new codes for you.
- Otherwise, Dashlane points you to the Chat button on its help page, without saying what proof it needs or how long it takes.
See also Lost the phone with your authenticator app?
Changing phones or turning 2FA off
Dashlane has no separate new-phone steps. While the old iPhone still works, turn 2FA off, then on again, scanning the new QR code with Novaz on the new iPhone. If you use iCloud backup or a backup file in Novaz, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
To turn it off on the web, go to Security settings, turn off 2-factor authentication, select Yes, turn off, enter a token and select Next. In the iPhone app, go to Settings > Security, turn off 2-factor authentication (2FA), and confirm with a token (Dashlane). Only once it's off, open the account in Novaz and tap Remove account.
