DeviantArt 2FA: how to set up an authenticator app

Your DeviantArt account holds your gallery and any money you've made from sales. Two-factor authentication (2FA) is optional for most deviants, with one exception: you can't withdraw earnings until it's on (DeviantArt). The only method DeviantArt's help describes is an authenticator app, backed by one-time recovery codes. Since July 2026, DeviantArt says 2FA is open to every account, not just Core Members (DeviantArt). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the DeviantArt steps come from DeviantArt's own Help Center and its Team journal announcement, linked below, which we read on October 19, 2026. We haven't tested them on a DeviantArt account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Signed up with Google, Apple or Facebook?

DeviantArt's pages disagree. The July 2026 announcement says these accounts can now turn on 2FA directly on DeviantArt (DeviantArt). The help article still says they can't, and points them to the social account's own 2FA (DeviantArt). We follow the announcement, since it describes the change itself.

Either way, protect that Google, Apple or Facebook account, since DeviantArt says you need it to recover yours (DeviantArt).

Turn on 2FA with an authenticator app

DeviantArt's help article describes these steps (DeviantArt):

1. Open the menu under your avatar, choose Settings, then go to Security and privacy (deviantart.com/account/auth). Other DeviantArt pages call it Security & Privacy or the Authentication page.
2. Enter your password to start the setup.
3. DeviantArt shows a QR code. In Novaz, tap +, then Scan QR code. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. Under the QR code is a text key, which DeviantArt calls a 16-digit text code. To type it instead, tap + in Novaz, then Enter key manually, and enter it as the Setup key. See What is a 2FA setup key?
5. Type the 6-digit code from Novaz in the Authenticator Code box, then click Verify and Save.
6. DeviantArt lists your recovery codes. Print them or write them down before you leave the page.

Before 2FA goes on, DeviantArt also emails you a one-time security code to enter. If it doesn't arrive, check your spam folder and the email address on your account. If you use Sign in with Apple with a hidden email address, Apple may block these emails, and DeviantArt says to contact Customer Support.

DeviantArt doesn't say how often its codes change, so scanning the QR code is safer: it passes the code settings to Novaz, while a typed key always gets 30 seconds.

Keep your recovery codes

Each recovery code works once. If you misplace your codes, go back to the Authentication page in Account Settings, enter your password and click Regenerate recovery codes. The old set stops working at that moment (DeviantArt).

Keep these codes even if you back up Novaz: if the phone is gone and you have no iCloud backup or backup file, they're how you get back in. Store them away from the phone, on paper or in a password manager. See 2FA backup codes.

When DeviantArt asks for a code

DeviantArt's help says it asks when you sign in from a device it doesn't recognize, and before sensitive actions such as withdrawing earnings (DeviantArt).

Never give a code to anyone, including moderators, support staff or someone who says they work for DeviantArt. As the announcement puts it, "No legitimate request will ever ask for it" (DeviantArt).

If DeviantArt rejects your code

DeviantArt's advice is to check the phone's clock, because authenticator apps depend on the exact time (DeviantArt). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

DeviantArt's help doesn't describe moving 2FA to a new phone. With a Novaz iCloud backup or backup file, you just restore your accounts on the new iPhone. Without one, while you still have the old phone, turn 2FA off (below), then set it up again with the new iPhone and save the new recovery codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your recovery codes, then make a new set and set up Novaz again. Also check Logged-In Devices in Security & Privacy and sign out any session you don't recognize (DeviantArt).

Without recovery codes, email accountrecovery@deviantart.com. A team member replies and asks for more information to confirm the account is yours, and may not be able to help if you can't provide it (DeviantArt). DeviantArt doesn't say what it asks for or how long recovery takes. Customer Support works Monday through Friday (DeviantArt).

More in Lost the phone with your authenticator app?

Turning 2FA off

On the Security and privacy page, enter your password and click Disable (DeviantArt). You'll need it back on before your next withdrawal. To clear the old entry from Novaz, open it and tap Remove account.

Official DeviantArt help

• What is two-factor authentication, and how do I enable or disable it?
• Two-factor authentication is now open to all (Team journal)
• How do I withdraw my earnings?
• What should I do if I've lost access to my account?
• How do I submit a ticket to Customer Support?
• How do I view and clear my active sessions?