Dynadot 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Dynadot account holds your domains, so Dynadot guards it in two layers. Signing in lets you in, but the account stays locked: to edit account details or unlock a domain, you unlock it first, and it locks itself again after an hour (Dynadot). Two-step verification adds a code to both.
It's optional. The methods are text messages, an authenticator app, a security key and 10 single-use backup codes (Dynadot). Dynadot's pages call the app option Authenticator App, Two-Factor Authenticator or Google Authenticator, but any authenticator app works. This guide uses Authenticator App - Novaz on iPhone.
How we checked this guide: the Dynadot steps come from Dynadot's own help files, linked below, which we read on October 20, 2026. We haven't tested them on a Dynadot account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
These steps come from Dynadot's setup article, last updated in March 2026 (Dynadot):
- Sign in to Dynadot. In the left-side menu, choose My Info, then Security.
- Click Manage Two-Factor Authenticator. That's the label in Dynadot's newest article; the setup article says Manage Two-Factor Authentication, so yours may differ.
- Verify yourself. Accounts created before August 18, 2026 use the 4-digit Security PIN; newer accounts use the account password instead (Dynadot).
- Click the plus icon next to Authenticator App. A pop-up shows a key and a QR code.
- In Novaz, tap +, then Scan QR code. If the code is on the same iPhone, take a screenshot and use Choose a photo (see scanning a QR code on the same iPhone).
- Or tap +, then Enter key manually, and paste the key as the Setup key. Dynadot doesn't state its code length or interval, so scanning is safer. See What is a 2FA setup key?
- Type the code from Novaz into Generate A Token and click Enable Authenticator App.
- Click Lock Account Now when you're done.
Dynadot's security overview page describes the same flow with different labels, such as Enable Two-Factor Authenticator and Enable Token (Dynadot).
Backup codes
Accounts created on or after August 18, 2026 get backup codes automatically, by email, once the address is verified. Older accounts turn them on by hand: open Manage Two-Factor Authenticator, unlock, click the plus icon next to Backup Codes, then Confirm. That only works once a primary method, such as the app, is on (Dynadot).
You can generate a fresh set if you lose them. If that phone is gone and you have no Novaz backup (iCloud backup or a backup file), these codes get you in. Keep a copy away from it. See 2FA backup codes.
When Dynadot asks for a code
By default, at every sign-in. To be asked only from a new IP address, unlock the account, go to Authentication Settings, pick Every New IP Address instead of Every Login (Most Secure), and click Save (Dynadot).
Every unlock asks for a code too. With more than one method, Verify All Enabled requires all of them, while Verify Only Default asks only for your default one (Dynadot).
If Dynadot rejects your code
Dynadot's help files don't cover this. If you have several methods, make sure the page wants the app's code, not a text message code. Then check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when it's 15 seconds or more off. More in Authenticator code not working?
Changing phones
Dynadot doesn't describe a phone change, but it lets you view your key again: unlock the account, click the ellipsis icon next to Authenticator App, then Edit (Dynadot). Do this while the old phone still works, since unlocking needs a code, and add the key to Novaz on the new iPhone with Enter key manually. With a Novaz iCloud backup or backup file, you can skip that and restore your accounts on the new iPhone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Use a backup code if you have one. Otherwise, click Lost Cellphone, which appears under the code box when you sign in, and on the Unlock Account page. Answer your secret question exactly as you first wrote it, add any details asked for, and click Submit Request. A Dynadot team member reviews it before resetting your settings and may email your account address for more information (Dynadot). Dynadot doesn't say how long this takes.
One gap: since August 18, 2026, new accounts don't have to set security questions (Dynadot), and Dynadot doesn't say how the request works without one. On a newer account, your backup codes matter even more. More in Lost the phone with your authenticator app?
Turning 2FA off
Under My Info > Security, click Unlock Account and enter your codes. In the Two-Factor Authentication section, click the ellipsis icon, then Edit. Enter your password and click Disable Google Authentication (Dynadot). Then lock the account again, and remove Dynadot from Novaz by opening it and tapping Remove account.
Official Dynadot help
- What is 2 step verification?
- How do I add Two-Factor Authenticator to my Dynadot account?
- How do I activate the backup codes to my Dynadot account?
- Do I really have to enter my Google Authenticator token code or SMS code on every login?
- When will I be required to enter my Google Authenticator token code?
- How do I unlock my account?
- What is the "Account Lock" feature?
- How do I find my Google Authenticator serial number or key?
- Help! I lost my cellphone or serial number! How do I change my Google Authenticator or SMS settings?
- Why do you need a Security PIN and secret question and answer from me?
- How do I turn off Google Authenticator?
- Domain Security, Privacy, Locks & DNS Protection