Detectify 2FA: how to set up an authenticator app

Detectify is a security platform that scans your websites, APIs and internet-facing assets for vulnerabilities, so the account holds a detailed map of your weak spots. Detectify's two-factor authentication (2FA) works with any app that makes time-based codes (TOTP), and that's the only second factor its documentation describes. Text-message codes aren't mentioned (Detectify). It's optional for most users. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Detectify steps come from Detectify's own documentation and knowledge base, linked below, which we read on October 21, 2026. We haven't tested them on a Detectify account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Check first: does your company sign you in with SSO?

If your organization connects Detectify to its own identity provider through SAML single sign-on, Detectify's 2FA setting usually doesn't apply. When SSO is enforced, password sign-in is switched off and your identity provider handles every check, including any second factor (Detectify, Detectify). In that case, set up 2FA with your company's sign-in system, not in Detectify.

Enterprise customers can also make 2FA mandatory for a whole team. According to Detectify's older knowledge base article, its own staff switch this on, so you ask your Customer Success Manager (Detectify).

Turn on 2FA with an authenticator app

Detectify's current documentation, last updated in May 2026, describes these steps (Detectify):

1. Sign in to Detectify and go to Settings > Security > Two-Factor Authentication.
2. Click Enable 2FA.
3. Detectify shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If you're looking at Detectify on the same iPhone, take a screenshot, tap + and use Choose a photo instead. See scanning a QR code on the same iPhone.
4. If scanning doesn't work, Detectify also offers a setup key to type in. In Novaz, tap +, then Enter key manually. Type "Detectify" as the Service and the key as the Setup key. See What is a 2FA setup key?
5. Type the 6-digit code that Novaz shows into Detectify to confirm.
6. Save the recovery codes that appear on screen before you leave the page.

Detectify's codes are 6 digits and change every 30 seconds, which matches what Novaz makes from a typed key, so either way of adding the account works.

The older knowledge base article from 2021 reaches the same setting another way: click the blue avatar at the top left of the dashboard, open Account Settings, and choose Enable under Two-factor authentication (Detectify). If the menus you see don't match the newer path, try that one.

Keep the recovery codes somewhere else

Each recovery code signs you in once, in place of an authenticator code. Detectify suggests keeping them in a password manager or another secure place. When you've used most of them, you can make a new set from the same 2FA settings page (Detectify).

Keep them even if you back up Novaz. Without an iCloud backup or a backup file, Novaz's keys exist only on that iPhone, and the recovery codes are what gets you in if it's lost or broken. Store them away from the phone. More in 2FA backup codes.

When Detectify asks for a code

Every time you sign in. After your email and password, Detectify asks for the current 6-digit code from your app (Detectify). The documentation doesn't mention an option to remember a trusted device.

If Detectify rejects your code

Detectify's pages don't cover rejected codes, beyond telling you to use the code your app is showing right now. Time-based codes rely on your phone's clock, so check it first: on iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Moving to a new phone

Detectify doesn't describe a separate way to move 2FA to another phone. While you can still sign in, a workable route is to turn 2FA off and then on again with the new phone, using the steps in this guide. If you've turned on iCloud backup in Novaz or exported a backup file, restoring it on the new iPhone brings Detectify across too. Otherwise, keep the old phone until Detectify works on the new one. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your recovery codes, then set up 2FA again on your new phone. If you have no recovery codes left and you're locked out, Detectify's knowledge base says to email support@detectify.com for help (Detectify). It doesn't say what proof support asks for or how long it takes. If your team signs in through SSO, your own IT team is the one to contact. See also Lost the phone with your authenticator app?

Turning 2FA off

Go to Settings > Security > Two-Factor Authentication, click Disable 2FA, and enter a current code from your app to confirm (Detectify). After that, you can remove Detectify from Novaz: open the account and tap Remove account.

Official Detectify help

• Two-Factor Authentication (Detectify Docs)
• Single Sign-On (Detectify Docs)
• How to enable two-factor authentication (2FA) on your account (Detectify Knowledge Base)