elmah.io 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
elmah.io is an error logging and monitoring service for .NET applications, so your account holds the error logs and alerts of the apps your team ships. Its two-factor login works with any authenticator app, but read one warning first. elmah.io's own setup screen says "We cannot disable two-factor authentication on your account" (elmah.io). Its help pages don't mention backup codes either, so the app is your only key. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the elmah.io steps come from elmah.io's own documentation, including the screenshots in it, linked below, which we read on October 22, 2026. We haven't tested them on an elmah.io account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Which sign-in this covers
You can sign in to elmah.io with an elmah.io username and password, or with Twitter, Facebook, Microsoft or Google (elmah.io). The authenticator app setting described here is for the username and password sign-in. If you sign in with one of the social providers, elmah.io says to turn on two-factor at that provider instead (elmah.io).
Two-factor is optional unless your organization says otherwise. An organization administrator can open the organization settings (the gear icon next to the organization name), select Security above the user list, and turn on Enforce two-factor authentication. Every member who signs in with a username and password then has to set it up (elmah.io).
Turn on 2FA with an authenticator app
elmah.io's documentation describes these steps (elmah.io):
- Sign in to elmah.io with your username and password and open your profile.
- Go to the Security tab. Under Two-factor authentication, select Start setup.
- A page titled Activate two-factor shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, then tap + and Choose a photo. See scanning a QR code on the same iPhone.
- If you can't scan it, use the key under Or input this code:. In Novaz, tap +, then Enter key manually, fill in Service, and type the key as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz in the field under Input the code from the authenticator app: and select Activate two-factor login.
When it works, the Security tab says two-factor is enabled and shows a Deactivate two-factor section instead of the setup button.
Before you leave that page: plan for a lost phone
elmah.io's documentation describes no backup codes, no second method and no support route for a lost authenticator. Its own tip is to use an authenticator app with cloud backup (elmah.io). In Novaz, that's iCloud backup (PRO) or a password-protected file from Export to file…, both under Settings > Backup. Also save the key shown under Or input this code: in a password manager or on paper, kept apart from your phone, in case you have no backup or it's out of date. Anyone with that key can make your codes, so store it as carefully as a password.
If elmah.io rejects your code
elmah.io's troubleshooting section lists three causes (elmah.io):
- The code was already used. Each code works once. After signing in, wait for a new code before, say, turning two-factor off.
- You're reading an old entry. Each new setup makes earlier elmah.io entries in your app useless, even with the same email address. In Novaz, open the old one and tap Remove account.
- A typo, or the code changed. Check the digits and try a fresh code.
If none of those fit, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
elmah.io doesn't document a phone switch. With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone and the codes keep working. Without one, while the old phone still works, you can turn two-factor off with a code from it, then run Start setup again on the new phone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
If you have a Novaz backup, restore it on your new iPhone. If not but you saved the setup key, add it to Novaz on the new phone with Enter key manually and sign in as usual. Without it, elmah.io's pages offer no recovery process, and its setup screen says the team can't disable two-factor for you. They don't say whether support can help in any other way. More general steps are in Lost the phone with your authenticator app?
Turning 2FA off
On the Security tab of your profile, type a new code from your authenticator app under Deactivate two-factor and select Deactivate two-factor login (elmah.io). If your organization enforces two-factor, elmah.io shows a page about the required settings when you next open that organization's logs (elmah.io).
