Discogs 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Discogs account holds your Collection, your Wantlist and any Marketplace orders. Two-factor authentication (2FA) is optional, but Discogs recommends it for every account and again after a break-in (Discogs, Discogs).
The setting is easy to miss: it isn't one of the tabs under Settings on discogs.com (Discogs). It lives on a separate Account Dashboard at accounts.discogs.com. You set up an authenticator app there, and at sign-in Discogs can also email you a one-time code instead (Discogs).
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Discogs steps come from Discogs's own help center, including the screenshots in its two-factor article, which we read on October 20, 2026. We haven't tested them on a Discogs account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
These steps follow Discogs's two-factor article, last updated in December 2024 (Discogs):
- Sign in on discogs.com.
- Go to the Account Dashboard at accounts.discogs.com. Under Two-factor authentication, select Setup next to Authenticator app.
- Discogs shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the page is open on the same iPhone, take a screenshot, then tap + and Choose a photo. See scanning a QR code on the same iPhone.
- Type the code Novaz shows into Discogs to confirm.
- A green banner confirms 2FA is on, with a Back to your Dashboard link.
Discogs's help only mentions the QR code. It doesn't say whether there's a text key, or how many digits and seconds its codes use, so scan the QR code: it carries those settings. If you do find a key, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
Discogs says its entry shows up in an authenticator app as account.discogs.com, not as Discogs.
Recovery codes: shown, not explained
The text of Discogs's article never mentions recovery codes. Its screenshot of the dashboard with 2FA on does show a Recovery codes row with a Regenerate Codes link (Discogs). The help doesn't say how you get them or how to use one.
If Discogs gives you recovery codes, keep them somewhere other than your phone. They're what you'd use if the phone is lost and you haven't backed up Novaz to iCloud or a backup file. More in 2FA backup codes.
When Discogs asks for a code
With 2FA on, Discogs wants a code when you sign in from a browser or device it doesn't recognize, and it sends you alerts about access to your account (Discogs, Discogs). After your password, a Verify Your Identity screen asks you to Enter your one-time code, then Continue. Some of the article's screenshots also show a Remember this device for 30 days box on that screen.
Discogs's sign-in screen also offers Google, Apple and Facebook. The help doesn't say whether the code step applies to those.
If Discogs rejects your code
Discogs's help doesn't cover rejected codes. Two things to check:
- You're reading the right entry: the one labeled account.discogs.com.
- Your iPhone's clock is right: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off.
Other causes are in Authenticator code not working?
If you lose your authenticator
Discogs has an email fallback. On the Verify Your Identity screen, select Try another method, then choose email from the list of your methods. Discogs sends a one-time code to your registered address. Type it in Enter the code and select Continue (Discogs). Since your inbox can stand in for the app, protect your email account well.
If that doesn't get you in, send Discogs Support a support request asking them to remove 2FA. To show the account is yours, Discogs asks you to include:
- your username, email address and shipping address;
- your phone number, if there's one on the account;
- the amount and contents of a recent purchase or sale;
- if your Collection or Wantlist is private, two or three releases with roughly when you added them, or notes you wrote on them;
- anything else that helps prove who you are.
Discogs doesn't say how long this takes. Lost the email address too? That also goes through a support request (Discogs). See also Lost the phone with your authenticator app?
Changing phones
Discogs's help doesn't describe switching phones. It does document removing the authenticator app, after which its screenshot shows Setup back next to Authenticator app (Discogs). So remove it and set it up on the new phone while the old one still gives you codes. If you've backed up Novaz, restoring your accounts on the new iPhone from iCloud backup or a backup file does the job without removing anything. See How to transfer your authenticator app to a new iPhone.
Turning 2FA off
On the Account Dashboard, select the X next to Authenticator app. A green banner reads Your MFA device has been disabled. Discogs's help is blunt about it: "we strongly discourage removing the two-factor authentication" (Discogs).
