easyDNS 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your easyDNS account is the control panel at cp.easydns.com for your domains, DNS hosting and easyMail. Two-factor authentication (2FA) is optional. easyDNS can send the second step by text message or email, or take a code from an authenticator app (easyDNS). In the settings, the app option is called Google Authenticator, but Google's app isn't required. This guide uses Authenticator App - Novaz on iPhone, and any other authenticator app works the same way.
How we checked this guide: the easyDNS steps come from easyDNS's own knowledge base and feature pages, linked below, including the screenshots in its Account Security article, which we read on October 20, 2026. We haven't tested them on an easyDNS account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
First, check your recovery settings
easyDNS doesn't offer backup codes for 2FA. If your second factor is lost, its Account Security article says the way back is through support, using the answers to your security questions (easyDNS). Those are on the same Security page, under Access Recovery and Support, in one of two modes:
- Secret Questions & Answers: three questions with your own answers.
- Enhanced Security Mode: 12 random words picked by easyDNS, kept in order, plus a Phone Access Code (4 digits).
If your phone is gone and you have no Novaz backup (iCloud backup or a backup file), these answers or words are what you have left, so store them away from the phone.
Turn on 2FA with an authenticator app
From easyDNS's Account Security article and its screenshots (easyDNS):
- Sign in at cp.easydns.com.
- Open the USER menu at the top (it shows your username) and choose Security.
- In the security information box, find Two-factor Authentication and select edit.
- Under two-factor authentication options, set Authentication Method to Google Authenticator. easyDNS shows a Secret and a QR Code.
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If it's on your iPhone's own screen, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- To type it instead, tap +, then Enter key manually, and put the Secret in Setup key. See What is a 2FA setup key?
- Set the two switches under the QR code (next section) and select NEXT.
- Confirm the change with the current code from Novaz.
easyDNS doesn't say how many digits its codes have or how often they change. The sample secret in its screenshot is 32 characters, which Novaz accepts, but scanning is safer because the QR code carries the code settings.
The ACL and country switches
easyDNS can also limit sign-ins to approved IP addresses and networks (an Access Control List, or ACL) and to chosen countries (easyDNS, easyDNS). Two switches on the 2FA screen tie into these: Enable for access outside the ACL and Enable for access outside the permitted countries. With one on, a sign-in from outside your limits can get in by passing 2FA. easyDNS suggests this for travel, so a trip abroad doesn't lock you out.
The 2FA feature page puts it as a choice of when to ask for the code: always, only outside your ACL, or only outside your permitted countries. easyDNS's pages don't mention remembering a trusted browser.
Without 2FA, easyDNS checks each sign-in's location and browser instead, and emails a token when something looks unusual. That token has to be entered within 5 minutes (easyDNS).
If easyDNS rejects your code
easyDNS's help doesn't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. If you typed the secret and no code ever works, remove the entry with Remove account and scan the QR code instead. More in Authenticator code not working?
Changing phones
easyDNS doesn't document moving 2FA to a new phone. With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone and easyDNS comes with them. Without one, you'll add easyDNS again on the new one. Do it while the old phone still works, and if you can't find a way to redo the setup, ask easyDNS support before you give the old phone up. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Getting back in goes through easyDNS staff. The 2FA screen says you can use your secret questions or a recovery code, without explaining the code further. The Account Security article, updated in March 2024, names only the security questions (easyDNS).
A newer article, updated in September 2026, sets out a strict process for anyone who can't log in at all: "This process is deliberately careful and takes time." (easyDNS) You email support@easydns.com with the subject Account Recovery Request – [Your Username]. Phone and chat can't be used. Be ready to send:
- a clear photo of a government photo ID, and a photo of you holding it;
- a signed, dated note on what happened, or notarized documents for a company account;
- other proof, such as recent invoices, and your security answers or passphrase.
easyDNS then contacts every email address and phone number on file and waits 72 business hours before deciding, so allow at least three business days. Neither page says which route a lost authenticator takes, so describe your situation when you write. See Lost the phone with your authenticator app?
Turning 2FA off
easyDNS's help doesn't describe turning 2FA off in the settings. During a 2022 Rogers network outage, it told customers whose text codes weren't arriving to contact support to have 2FA turned off (easyDNS).