Disqus 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Disqus account is what you sign in with to comment on the many sites that embed Disqus and, if you run a site, to moderate it in the Disqus admin. Two-factor authentication (2FA) has been open to every Disqus user since September 2024, and it's optional (Disqus). You can use an authenticator app, a code sent to your email, or both. Disqus says any app that makes time-based one-time passwords (TOTP) will do (Disqus).
If you lose your 2FA methods, Disqus says it can't let you in by hand: backup codes are the only way back (Disqus). So treat those codes as part of the setup, not an extra. The steps below use Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Disqus steps come from Disqus's own help center and blog, linked below, which we read on October 20, 2026. Disqus's 2FA article was last updated in September 2024 and is brief, so some labels here come from its screenshots. We haven't tested them on a Disqus account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
- Sign in on disqus.com and open your account settings at disqus.com/home/settings/account. You can also get there from Disqus Home (the gear icon, then Settings) or from a comment section (click your name, then Edit Settings) (Disqus).
- Find the Two-Factor Authentication section and connect the Authenticator App method (Disqus).
- Disqus shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If scanning doesn't work, look under the QR code for the setup key link. In Novaz, tap +, then Enter key manually, type Disqus as the Service, and put the key in Setup key. See What is a 2FA setup key? Disqus doesn't say how long its codes are or how often they change, so scanning is the safer choice.
- Type the current code from Novaz into the box below the QR code and select Verify.
Want email codes as well? Connect Email in the same section. Disqus lets you keep both methods on at once (Disqus).
Make your recovery codes now
Still in the Two-Factor Authentication section, select Generate next to Recovery Codes. Disqus's text calls them backup codes and strongly recommends making them as soon as 2FA is on (Disqus). Its screenshot of the settings warns that a new set cancels any older codes.
Even if you back up Novaz to iCloud or a backup file, keep these codes: they're the way in if the phone is gone and the backup is missing or out of date. Keep them in a password manager or on paper, somewhere other than that phone. More in 2FA backup codes.
Signing in once it's on
After your password, Disqus opens a Two-Factor Authentication page with a Code box and a Verify button. With both methods on, it asks for the authenticator code by default. To get an email code instead, choose Verify by email (Disqus). Disqus's help describes this step after every password sign-in and doesn't mention a way to remember a device.
Social logins are the exception. When you sign in to Disqus through a social account such as Google or Facebook, Disqus doesn't ask for the code at all (Disqus). If you sign in that way, turn on 2FA for that social account instead.
If Disqus rejects your code
Disqus's help doesn't cover codes that won't go through. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. More causes in Authenticator code not working?
If you lose your authenticator
You have two ways in, and only two:
- a recovery code, typed in place of the authenticator code;
- an email code through Verify by email, if you connected Email as a second method.
Without either, Disqus says it won't be able to give you access to the account (Disqus). Its Contact Help page offers a chat for locked-out users, but don't expect it to get you past 2FA.
The opposite problem has a fix. If you lose the email address but still have the authenticator, sign in with your old email and password, change the address in your settings and confirm the new one. A forgotten password can be reset at disqus.com/forgot (Disqus).
See also Lost the phone with your authenticator app?
Changing phones
Disqus's help doesn't explain how to move 2FA to a new phone. With Novaz, an iCloud backup or a backup file lets you restore your accounts on the new iPhone (How to transfer your authenticator app to a new iPhone). Without one, before you reset the old phone, make sure you have unused recovery codes or have connected Email. Then set Disqus up again on the new iPhone in the Two-Factor Authentication section.
Turning 2FA off
Disqus doesn't describe turning 2FA off in words. In the screenshot on its 2FA help page, each connected method has a Disconnect button next to it (Disqus).
