Databox 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Databox is a business analytics tool: you connect data sources such as ad, sales and marketing platforms, and build dashboards and reports on top of them. Its two-factor authentication (2FA) asks for a code after your email and password. You get two choices, an authenticator app or text messages, and only one of them can be on at a time (Databox). The authenticator app is the one that comes with recovery codes, so it's the better pick for most people. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app that makes time-based codes works the same way.
How we checked this guide: the Databox steps come from Databox's own help center, linked below, which we read on October 21, 2026. We haven't tested them on a Databox account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Is 2FA required?
Not by default. Each user turns it on for themselves. An account admin can make it mandatory, though: under Account Management > Advanced security > Two-factor authentication, switch on Require two-factor authentication for all users and confirm with Yes. In an organization with several accounts, Databox says this applies only to organization users, not to account users (Databox). The help page also notes that some of what it describes is limited to certain subscription plans, without saying which part.
If your company signs you in through single sign-on (SAML), your identity provider handles the sign-in instead (Databox).
Turn on 2FA with an authenticator app
Databox's help page gives these steps (Databox):
- Go to Account Management > Profile. From the Databox app, you get there through Account > My Profile (Databox).
- In the Password & Security section, click Enable.
- Choose the authenticator app as your method and click Select option.
- Databox shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If Databox is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the code Novaz shows into Databox to confirm.
- Download your recovery codes and put them somewhere safe.
The help page doesn't mention a text key you could type instead of scanning, so plan on scanning the QR code. If Databox does show a key, in Novaz tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
Databox says any standard TOTP authenticator app works, and names Google Authenticator and Duo Mobile as examples.
SMS or app: you pick one
Because only one method can be active, choosing SMS means no authenticator app, and the help page only mentions recovery codes for the app. Databox also sends 2FA texts only to approved countries and suggests the app if yours isn't one of them (Databox). For the general trade-offs, see authenticator app vs. SMS.
Your recovery codes are the backup
Unless you turn on iCloud backup or export a backup file, Novaz keeps its keys only on your iPhone. If that phone is lost without a backup, the Databox recovery codes are what get you back in, so store them away from the phone, for example in a password manager or on paper. Databox's page doesn't say how many codes you get or whether you can make new ones later. More in 2FA backup codes.
When Databox asks for a code
Databox's 2FA page doesn't say whether it asks at every sign-in or remembers devices. One action it does mention: changing your password opens a window that asks for your 2FA code (Databox). Turning 2FA off needs a code too (below). The help pages don't say whether 2FA also applies when you sign in with a linked Google account.
If Databox rejects your code
Databox's help doesn't cover rejected codes. The most common cause is a phone clock that has drifted: open Settings > General > Date & Time on your iPhone and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
New phone
Databox doesn't describe moving the authenticator to another phone. The documented route is to turn 2FA off and set it up again, which needs a working code, so do it while you still have the old phone. If you use iCloud backup or a backup file in Novaz, you can restore your accounts on the new iPhone instead; see How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your recovery codes. If you can't, Databox says to contact Databox Support, which will verify your identity before giving you access again (Databox). It doesn't say what proof it asks for or how long it takes. Support is reachable at help@databox.com, Monday through Friday, during U.S. Eastern business hours (Databox).
See also Lost the phone with your authenticator app?
Turning 2FA off
Go to Account Management > Profile, click Disable in the Password & Security section, and enter a current code from your app (Databox). The help page doesn't say what happens if your admin requires 2FA for everyone. Afterwards, open the Databox entry in Novaz and tap Remove account.
