dmarcian 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
A dmarcian account is where your team reads DMARC reports and tracks which services send mail for your domains, so it deserves more than a password. dmarcian treats each second factor as a device: you can add an authenticator app, a FIDO security key such as a YubiKey, or several of each, and each one gets a name of your choosing (dmarcian).
Two-factor authentication is optional for each person, but an account admin can make it mandatory for everyone, with one catch covered below. This guide uses Authenticator App - Novaz on iPhone for the app steps. Any authenticator app works the same way.
How we checked this guide: the dmarcian steps come from dmarcian's own help article and its screenshots, linked below, which we read on October 21, 2026. We haven't tested them on a dmarcian account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
dmarcian's 2FA article was last updated in April 2026, and its screenshots show these screens (dmarcian):
- Sign in to dmarcian, open your profile menu in the upper-right corner, and choose Preferences (dmarcian).
- Open the Two Factor Authentication tab. (The article's text still says to scroll down to a section of that name; the newer screenshots show it as a tab.)
- Click Add 2FA Device. A dialog called Add Two Factor Device opens.
- Under Select your two factor device, pick Token via authenticator app and click Next.
- Give the device a name you'll recognize later, such as "Novaz iPhone", and click Next.
- dmarcian shows a QR code, with the same key printed above it as text. In Novaz, tap +, then Scan QR code. On the same iPhone, take a screenshot and use Choose a photo instead (how).
- Type the 6-digit code from Novaz into Enter the code generated by the authenticator app. The article calls the button Verify & Create, while the screenshot shows Next, so click whichever you see.
- A Device verified message appears, followed by your Backup Codes. Copy or download them before you close the dialog.
Scan rather than type the key
The printed key is for apps that can't scan (what a setup key is). We'd still scan: dmarcian's article only says the code changes "every minute or two" without giving an exact interval (dmarcian), and a QR code carries the real timing, while a key typed into Novaz always gets 30 seconds. Tap the account in Novaz to see its Interval under Details.
The ten backup codes
After verification, dmarcian gives you ten backup codes, and each one works only once. It suggests storing them in a password manager or printing them and keeping the printout locked away (dmarcian). If that phone is gone and you have no Novaz backup (iCloud backup or a backup file), these codes are what gets you in. More in 2FA backup codes.
The article doesn't say whether you can generate a fresh set later, so keep the first set safe.
Signing in afterwards
The confirmation screen says a device will now be required at every login. After your password, dmarcian shows a Verify Your Login screen: open Novaz and type the current code. If your phone isn't at hand, choose Use backup code on that same screen (dmarcian).
Requiring 2FA for your whole team
On the same tab, admins see a switch, Require Two Factor Authentication for All Users. It stays locked until you've added a 2FA device to your own account, so set yours up first (dmarcian).
Enterprise accounts can also use SAML single sign-on, but owners and administrators can still sign in with a password unless Require SSO for all users is on (dmarcian). Its pages don't say how dmarcian's own 2FA applies to people who sign in through SSO.
If dmarcian rejects your code
dmarcian's own tip is simple: codes keep changing, so if one fails, wait for the next one and try again (dmarcian). If codes keep failing, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Since an account can hold several 2FA devices, the cleanest move is to add the new iPhone as another device while the old one still works. The article doesn't describe removing a device or turning 2FA off, so ask dmarcian support if you can't find how to retire the old one. With a Novaz iCloud backup or backup file, you can also restore your accounts on the new iPhone and keep the same codes; see How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your backup codes through Use backup code. If you added a second device, such as a security key, that works too. dmarcian's 2FA article doesn't describe any recovery process beyond these. For help with an existing account, dmarcian's support page gives the address support@dmarcian.com (dmarcian), but it doesn't say what proof you'd need or how long a reset takes. See also Lost the phone with your authenticator app?
