DEGIRO 2FA: how to set up an authenticator app

DEGIRO is an online broker, so your account holds your investments and the bank account linked to them. Its two-step verification (DEGIRO also calls it 2FA) is optional, and it works with an authenticator app on your phone. DEGIRO's help names Google Authenticator and Microsoft Authenticator as examples and says any similar app will do (DEGIRO, archived). Its help doesn't mention text-message codes or backup codes. That matters more than the setup itself: if you lose the phone, the documented way back in is a phone call to DEGIRO.

This guide uses Authenticator App - Novaz on iPhone. Novaz works like any other authenticator app here.

How we checked this guide: the DEGIRO steps come from DEGIRO's own Dutch help pages on degiro.nl, linked below. degiro.nl answered our automated reader with a security check page instead of the article, so on October 21, 2026 we read the pages as archived copies on web.archive.org. The help article was saved on February 18, 2026, and the security page on October 14, 2025. DEGIRO's pages are in Dutch, so the labels below are DEGIRO's Dutch wording with an English translation, and the platform may show other words in your language. We haven't tested the steps on a DEGIRO account. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA from a computer

DEGIRO's help describes two routes. This one is easiest, because the QR code is on one screen and the camera is on the other (DEGIRO, archived):

1. Sign in to DEGIRO's trading platform on your computer.
2. Move the pointer over the profile icon at the bottom left and choose Persoonlijke instellingen (personal settings).
3. Under Beveiliging (security), click Inschakelen (turn on), to the right of Twee-stapsverificatie (two-step verification).
4. DEGIRO asks you to install an authenticator app. You already have Novaz, so click Ga verder (continue).
5. In Novaz, tap +, then Scan QR code, and point the camera at the QR code on your computer screen.
6. Type the 6-digit code from Novaz into DEGIRO, then press Enter or click Inschakelen.

Turn on 2FA with only your phone

DEGIRO also explains how to do it with no second screen (DEGIRO, archived):

1. Sign in to DEGIRO on your phone and open the menu with the three lines at the top left.
2. Tap your name, then Persoonlijke instellingen.
3. Under Beveiliging, tap Inschakelen next to Authenticator app. On this screen the setting has that name rather than Twee-stapsverificatie.
4. Tap Ga verder.
5. Copy the key shown under Lukt het niet om de QR-code te scannen? (can't scan the QR code?).
6. In Novaz, tap +, then Enter key manually. Type DEGIRO under Service, add your username under Account if you like, and paste the key into Setup key. See What is a 2FA setup key?
7. Enter the 6-digit code from Novaz in DEGIRO and tap Inschakelen.

DEGIRO's help says its codes have 6 digits but doesn't say how often they change. A key typed into Novaz always gets 30-second codes. If DEGIRO keeps refusing the codes from a pasted key, remove that entry and add the account again from the QR code instead. To read a QR code on the same iPhone, take a screenshot, then tap + and Choose a photo in Novaz (scanning a QR code on the same iPhone).

When DEGIRO asks for a code

You type a code every time you sign in through a web browser, after your username and password. The DEGIRO app is different: it asks once, when you add your account to the app, and not again after that (DEGIRO, archived).

If DEGIRO says the code is wrong

DEGIRO's help names two usual causes for a code onjuist (code incorrect) error:

• You're reading the wrong entry. If you once turned off DEGIRO's 2FA but left the old entry in your app, that entry makes codes that no longer work. Check that you're using the current one, and delete old DEGIRO entries in Novaz by opening them and tapping Remove account.
• The phone's clock is off. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off.

More causes are in Authenticator code not working?

Changing phones

DEGIRO leaves this to your authenticator app. Its help suggests checking whether your app can export accounts to another device (DEGIRO, archived). Novaz can: turn on iCloud backup or export a backup file, then restore your accounts on the new iPhone. Without one, a new phone means setting DEGIRO up again. DEGIRO's help doesn't describe a way to turn 2FA off or reset it yourself in the settings. Keep the old iPhone working until DEGIRO runs on the new one, and see How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

DEGIRO doesn't document backup codes or a second method. If you no longer have the device that makes your codes, call DEGIRO's Service Desk and ask them to turn 2FA off by hand. After that you sign in with just your username and password and set it up again (DEGIRO, archived). DEGIRO's help doesn't say how the Service Desk checks that you're the account holder or how long it takes.

Because of that, be careful with anyone who contacts you claiming to be DEGIRO. DEGIRO says it never asks for your password, and that its Service Desk emails come from klanten@degiro.nl (DEGIRO, archived). For a 2FA reset, call the Service Desk yourself rather than answering a message. More in Lost the phone with your authenticator app?

Official DEGIRO help

• Wat is twee-stapsverificatie? (What is two-step verification?), read in an archived copy
• Let op phishing en foutieve URL's (Watch out for phishing and wrong URLs), read in an archived copy