Skip to content
Novaz AuthenticatorGET

Datto 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Before you start
  2. Turn on 2FA with an authenticator app
  3. When Datto asks for a code
  4. No backup codes
  5. If Datto rejects your code
  6. If you lose your authenticator or change phones
  7. Datto Workplace end users
  8. Official Datto help

Datto, part of Kaseya, makes backup, monitoring and file-sharing tools for managed service providers. Staff at those providers sign in through the Datto Partner Portal, which also handles sign-in for Datto RMM, Datto SaaS Protection, and the manager side of Datto Workplace and File Protection (Datto, Datto). There, multifactor authentication (MFA) is mandatory: anyone who hasn't set it up is asked to at the next login, and a new account left without it for seven days is deactivated (Datto). You can use any authenticator app that makes time-based codes, or Duo, Datto's native option. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way. Datto Workplace end users have a separate setting, covered at the end.

How we checked this guide: the Datto steps come from Datto's own help pages for the Partner Portal, Datto RMM and Datto Workplace, including their screenshots, linked below, which we read on October 20, 2026. We haven't tested them on a Datto account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start

  • Use your own login. MFA doesn't work on shared accounts, since each account authenticates one registered device (Datto).
  • Check that api.qrserver.com isn't blocked. The portal loads its QR code image from there, so a firewall that blocks it leaves you nothing to scan (Datto).
  • KaseyaOne is different. If your company requires KaseyaOne Unified Login, you sign in on KaseyaOne's page, which this guide doesn't cover (Datto, Datto).

Turn on 2FA with an authenticator app

If you haven't set up MFA yet, the portal asks right after your email and password, and you can go on from step 3. Otherwise, start from your settings (Datto, Datto):

  1. In the Datto Partner Portal, click your account name (top right) and choose User Settings. From Datto RMM, use Setup > My Settings > View in Partner Portal.
  2. On the MFA card, click CONFIGURE. Datto's text calls it Multifactor Authentication; its screenshots say Two-Factor Authentication.
  3. Select Third Party Authenticator App. Under Choose your authenticator app, pick Other and type Novaz in the Authenticator field that appears.
  4. In Novaz, tap +, then Scan QR code, and point the camera at Datto's QR code. If the portal is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
  5. Type the 6-digit code from Novaz in Verification Code and click ENABLE 2FA. One Datto page calls this button Enable mfa.
  6. A SUCCESSFULLY ADDED message confirms the setup.

Datto's pages and screenshots show only the QR code, with a REFRESH CODE link under it, and no text setup key, so plan to scan.

When Datto asks for a code

After your email and password, a Two-Factor Login page asks for a Token. Type the current Novaz code and click AUTHENTICATE (Datto).

That happens at every login unless a Security Admin allowlists your office's IP address, which cuts the prompt to once every three weeks. Accounts of a partner's end-user organizations can't use this and always get the prompt (Datto, Datto).

If a Security Admin turns on Duo for the whole company, the portal asks you to enroll in Duo Mobile at your next login, and that part doesn't involve Novaz (Datto).

No backup codes

The Partner Portal pages don't mention backup or recovery codes, so getting back in depends on an admin. Unless you use iCloud backup or a backup file, Novaz keeps its keys only on your iPhone, so make sure more than one person at your company can reset MFA. Datto RMM's help gives the same advice for its administrators.

If Datto rejects your code

Datto's help doesn't cover rejected codes. The usual cause is the iPhone's clock: go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

If you lose your authenticator or change phones

Datto documents no self-service way to move MFA. Lost phone or new phone, the route is an admin reset:

  • Partner Portal employees: a Security Admin opens Admin > Manage Employees, clicks the pencil icon next to you, and uses the Email TOTP to... link. You sign in with the emailed one-time passcode, set new login details, and set up MFA again (Datto).
  • Organization users (a partner's clients): the Security Admin does the same from Admin > Manage Organizations, with the Email to user link. For an organization with several Datto accounts, the Security Admin has to call Datto Technical Support instead (Datto).
  • Datto RMM users: an RMM admin can click Send 2FA Reset Email on your user. You get an emailed verification code and set up 2FA again in the Partner Portal (Datto). Without Partner Portal access, Datto RMM's help says to submit a Kaseya Helpdesk request.

If that fails, a Security Admin from your company should contact Datto Technical Support. Datto doesn't say what proof it asks for or how long it takes. For a new iPhone, restoring Novaz from iCloud backup or a backup file brings your Datto entry along without a reset. Otherwise, keep the old one until the reset is done. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

Datto Workplace end users

At workplace.datto.com, your team administrator decides whether 2FA is required (Datto). If it is, a Two-Factor Authentication Setup page appears at login: choose Authenticator App (Recommended), click Setup Now, and follow the instructions. Afterwards, type the code at each login and click Verify.

The setting lives under your name (My Account) > My Settings > Two-Factor Authentication, and Datto recommends the app over text messages (Datto). For a new phone, click Reset 2FA, then Reset, and set it up again. If you've lost the phone, your Workplace administrator has to reset it. The Workplace pages don't mention backup codes or a text key.

Official Datto help

More guides: Productivity and remote work