Docusign 2FA: how to set up an authenticator app

Your Docusign account is where you send agreements for signature and track them in Docusign eSignature. Docusign calls its 2FA "two-step verification", and it's built differently from most services. The authenticator app is an extra method on top of a verified phone number or second email address, not a replacement: Docusign won't let you switch two-step verification on until one of those is verified (Docusign). Security keys and passkeys are the other options (Docusign).

It's optional unless your company has claimed its email domain in Docusign Admin: then an administrator can require it for password sign-ins, at once or after a 14-day grace period (Docusign).

This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Docusign steps come from Docusign's eSignature user guide and support articles, linked below, which we read on October 20, 2026. We haven't tested them on a Docusign account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start: verify a phone or second email

Your sign-in email counts as one verified method, and Docusign wants a second (Docusign):

1. Select your profile image, then Manage Profile.
2. Select Privacy & Security. Sign in again if Docusign asks.
3. Select Get Started and follow the guided setup for a Phone number (Docusign's recommended choice, with codes by text or call) or a Secondary email.

This is also your way back in if you lose the phone with your authenticator.

Add the authenticator app

On the same Privacy & Security page (Docusign):

1. Scroll to Verification Methods.
2. Next to Authenticator App, select SET UP APP. A window titled Set Up Authenticator App opens with a barcode to scan.
3. In Novaz, tap +, then Scan QR code, and point the camera at it. If Docusign is open on the same iPhone, take a screenshot, then tap + and Choose a photo. See scanning a QR code on the same iPhone.
4. Enter the code Novaz shows to confirm it. Docusign then lists the app among your verification methods.

Docusign's guide only describes scanning. It doesn't mention a key you can type or say what code settings it uses, so scan the QR code: it carries those settings to Novaz.

Turn on two-step verification

Adding the app doesn't switch anything on. That's a separate control (Docusign):

1. On Privacy & Security, scroll to Login Security.
2. Turn on Two-Step Verification.

Docusign confirms the change to your verified email addresses and phone numbers.

Recovery codes

Under Recovery Codes on the same page, Show Codes gives you five single-use codes, and GENERATE NEW CODES replaces them (Docusign). One Docusign article says two-step verification must be on first; another says your account administrator must enable recovery codes (Docusign). If the section is missing, that may be why.

When Docusign asks you to verify by email or phone, you can pick Use Recovery Code. Docusign describes the codes as a fallback for a lost secondary email or phone and for password resets, not explicitly for a lost authenticator. Save them anyway, away from the phone: unless you've backed up Novaz to iCloud or a backup file, its keys exist only on that iPhone. See 2FA backup codes.

Signing in

After your password, Docusign asks you to verify with one of your methods; it says it favors the most secure one you've registered (Docusign). To use a different one, select Choose another method, then enter the code and select Verify (Docusign).

Signing in from a new device or browser adds a separate check, which accepts a code from your email, a text or your authenticator app. Keep persistent cookies on so the browser is recognized next time (Docusign).

Most Docusign apps, including the mobile apps, work with two-step verification, but some third-party apps may stop connecting; Docusign sends you to their developers (Docusign).

If Docusign rejects your code

Docusign's help doesn't cover rejected authenticator codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Meanwhile, Choose another method gets you in another way. More causes are in Authenticator code not working?

Changing phones

Docusign says to update your security information before you replace a device, and singles out authenticator apps (Docusign). Its pages don't show how to replace an app you've set up, so while you still have the old iPhone, check the options next to Authenticator App under Verification Methods. If you have a Novaz iCloud backup or backup file, restore your accounts on the new iPhone; otherwise, set Docusign up again on the new one. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

At sign-in, select Choose another method and use your phone number or secondary email, or a saved recovery code. Then set up the app again under Verification Methods.

If every method is gone, Docusign is blunt: "Losing access to all registered methods means no account access." (Docusign) Its help doesn't describe a support process for resetting two-step verification, and its I can't log in form is meant for password problems (Docusign). More in Lost the phone with your authenticator app?

Turning it off

Go to Manage Profile > Privacy & Security and turn off Two-Step Verification under Login Security. Docusign keeps your verified methods on file for recovery and sends a confirmation (Docusign).

Official Docusign help

• Two-Step Verification
• Set Up Two-Step Verification
• Use an Authenticator App for Two-Step Verification
• Set Up Two-Step Verification With Text or Call
• Use and Best Practices for Verified Security Information
• Turn Off Two-Step Verification
• Login Settings
• How do I turn on recovery codes to access my account without a password?
• Use a Docusign account recovery code
• Why am I being asked to verify my identity when logging in from a new device?
• How do I reset my Docusign password?