Egnyte 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
If your company keeps its files in Egnyte, a second sign-in step isn't optional. Egnyte calls it Two-Step Login Verification (TSLV), and it covers every user on the web, mobile and desktop apps. In Egnyte's words, "TSLV cannot be disabled for any user account" (Egnyte). What you do choose is the method: an authenticator app that makes time-based codes (TOTP), which Egnyte recommends; the Authy app by Twilio, with push prompts or codes; or a phone number for text or voice codes (Egnyte). This guide covers the first option with Authenticator App - Novaz on iPhone. Any TOTP authenticator app follows the same steps.
How we checked this guide: the Egnyte steps come from Egnyte's own help center, including the screenshots in its articles, linked below, which we read on October 20, 2026. We haven't tested them on an Egnyte account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Read this first: your admin is the recovery plan
Egnyte's help pages don't mention backup or recovery codes. When someone loses the phone they verify with, the documented fix is an Egnyte admin resetting their two-step setup (Egnyte). Before you start, find out who your Egnyte admins are and how to reach them without Egnyte.
If you sign in through single sign-on (SSO), such as Okta, an admin can exclude SSO users from Egnyte's check and leave the second step to the SSO provider (Egnyte). In that case you may never see the screens below.
Set up an authenticator app
Most people meet the setup screen at sign-in, since Egnyte asks every user to set it up at their next login (Egnyte). The user guide also points to Settings > My Profile > My Preferences > Security (Egnyte).
- Sign in with your username or email address and password. On the screen about two-factor authentication, select Get Started. If you started from your profile settings, Egnyte signs you out first, so sign in again.
- On Choose security method, select Authenticator app (Recommended), then Next.
- Egnyte shows Enable an authenticator app in 3 easy steps with a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- If scanning fails, use the key Egnyte prints under the QR code. In Novaz, tap +, then Enter key manually, type Egnyte as the Service, and enter the key as the Setup key. See What is a 2FA setup key?
- Under Use received security code, type the current code from Novaz in the Code box and select Next.
- When Egnyte confirms that the authenticator app has been set up, select Continue.
Egnyte doesn't say how often its codes change. Scanning the QR code is the safer route, because the code passes its settings to your app, while a typed key always gets 6-digit, 30-second codes in Novaz. Egnyte's SFTP article does describe the authenticator code as 6 digits (Egnyte).
When Egnyte asks for a code
- Web sign-in: after your password, Egnyte asks for the code from your app. Type it and select Next (Egnyte).
- Fewer prompts: admins can turn on Remember this Device, which skips the check on a device for a period they set. They can also list Trusted Networks, IP addresses that need no code (Egnyte).
- Desktop app: set up two-step verification on the web first. The desktop app only asks when you add or authenticate a drive (Egnyte).
- SFTP: if your company has turned on two-step verification for SFTP, a feature in limited availability, you enter your password and then a code from your authenticator app. Only authenticator apps work here, not Authy or phone codes. In FileZilla, set the logon type to Interactive (Egnyte).
If Egnyte rejects your code
Egnyte's help pages don't cover rejected authenticator codes. The usual cause is the iPhone's clock, so turn on Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
New phone, lost phone, or a different method
Egnyte doesn't describe a way to replace your authenticator yourself. Its FAQ answers the new-device question with an admin task: the admin opens your user details and selects Reset next to Two-Step Login Verification (Egnyte). You then enroll again. Egnyte's admin guide uses the same reset to switch someone from Authy to an authenticator app (Egnyte).
Changing iPhones: ask for the reset when the new phone is in your hand, then scan the new QR code with Novaz on it. If you have a Novaz iCloud backup or backup file, you can skip the reset and restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
Lost phone: contact an admin of your Egnyte domain and ask for the reset. Egnyte's pages don't say what proof is needed or how long it takes, and they don't cover an admin who loses their own authenticator. Egnyte Support takes cases by email or online form (Egnyte), but the 2FA pages don't say Support resets two-step verification. See Lost the phone with your authenticator app?
Turning it off
You can't. The admin setting for two-step login verification is greyed out, and the FAQ answers plainly that it can't be disabled (Egnyte). Only remove Egnyte from Novaz (open it and tap Remove account) after a reset or once another phone is set up.
