EasyDMARC 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
EasyDMARC is where companies and managed service providers watch DMARC reports and manage SPF, DKIM and DNS records, so an account there can change how a domain's mail is authenticated. EasyDMARC's two-factor authentication (2FA) has one documented method: an authenticator app that makes time-based one-time passcodes (TOTP). Its help pages don't mention text messages, email codes or backup codes, and they don't say 2FA is required. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the EasyDMARC steps come from EasyDMARC's own knowledge base, including its screenshots, and from an older EasyDMARC blog article, all linked below, which we read on October 21, 2026. The blog on easydmarc.com blocks automated access, so we read that article in an archived copy on web.archive.org from June 2026. We haven't tested any of this on an EasyDMARC account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Where the setting is
2FA is a personal setting, not an organization one. In the EasyDMARC dashboard, select your profile icon in the top-right corner, then Security (EasyDMARC). The Security & SSO page lower in the side menu belongs to Organization settings and isn't the one you want.
Turn on 2FA with an authenticator app
EasyDMARC's current knowledge base article describes these steps (EasyDMARC):
- Open Personal settings > Security.
- Under Two-factor authentication (2FA), find the Authenticator App (TOTP) card and select Activate.
- EasyDMARC shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the one-time code that Novaz shows into the configuration page and select Submit.
When it works, the card shows Active next to Authenticator App (TOTP), as in the screenshot on EasyDMARC's removal article.
EasyDMARC's pages only talk about scanning the QR code. They don't say whether you can see a text key instead. If the page does offer one, in Novaz tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key? Scanning is still the safer choice, because the QR code carries the code settings and a typed key gets Novaz's defaults.
An older EasyDMARC blog article from 2020, last changed in May 2025, describes the same setup with different labels, such as Enable 2-factor authentication, Next and Verify OTP (EasyDMARC). The knowledge base article is newer, so expect its labels.
No backup codes in the docs
Neither the knowledge base nor the blog mentions backup or recovery codes. With Novaz this matters if you haven't made a backup, because without iCloud backup or a backup file its keys stay only on your iPhone. If your phone is lost and EasyDMARC gives you no codes, the only documented way back in is EasyDMARC support (below). If EasyDMARC does show you recovery codes during setup, save them somewhere away from your phone. More in 2FA backup codes.
When EasyDMARC asks for a code
The Authenticator App (TOTP) card says the app gives you a passcode each time you log in, (EasyDMARC). The older blog article describes sign-in as two steps: your password, then your phone (EasyDMARC). The pages don't mention remembered or trusted devices.
If EasyDMARC rejects your code
EasyDMARC's help doesn't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. For other causes, see Authenticator code not working?
Switching to a new phone
EasyDMARC's way to switch devices is to remove the current method and set it up again (EasyDMARC):
- Select your profile icon, then Security.
- In the 2FA section, select Remove next to your active authenticator app.
- Confirm in the pop-up. In EasyDMARC's screenshot it's titled Delete OTP? and the button is Yes, Delete.
- Select Activate again and scan the new QR code with the new phone.
Do this while the old phone still works, because you need to be signed in to reach these settings. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead; without one, each account has to be added again. See How to transfer your authenticator app to a new iPhone.
The same steps turn 2FA off for good: after step 3, just leave the card on Activate. The removal article says that leaving it disabled is your choice.
If you lose your authenticator
If you're locked out and can't reach the security settings, EasyDMARC says to contact its support team, which checks your identity and then resets 2FA by hand (EasyDMARC). The article links to EasyDMARC's contact form. It doesn't say what proof support asks for or how long a reset takes. Because there are no documented backup codes, this is the route you'll most likely need, so make sure you can still read the email inbox on your account. For general steps, see Lost the phone with your authenticator app?
