EmailMeForm 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
EmailMeForm is an online form builder that businesses use for contact forms, orders, payments and surveys. Its multi-factor authentication (MFA) is tied to the paid security side of the product. The pricing pages list Two-Factor Authentication on the Compliance plans and not on the Form Builder plans (EmailMeForm, EmailMeForm). If your account has Vault, EmailMeForm's PCI-certified add-on for card data, MFA isn't optional: you're asked to set it up the first time you sign in after Vault is switched on (EmailMeForm).
The only method EmailMeForm documents is a time-based code from an authenticator app (TOTP), plus single-use recovery codes (EmailMeForm). Its help suggests Authy or Google Authenticator on iPhone, but any TOTP app works. This guide uses Authenticator App - Novaz. After this, we call it Novaz.
How we checked this guide: the EmailMeForm steps come from EmailMeForm's own help center and website, linked below, which we read on October 21, 2026. We haven't tested them on an EmailMeForm account, so a label may differ slightly. Some of the help screenshots are dated 2018, so screens may have changed. The Novaz steps are checked against the app, version 1.0.5.
Turn on MFA with an authenticator app
EmailMeForm's help doesn't describe a switch in account settings. The setup page appears on its own: on a Vault account, you first choose a new password, then select Continue to start MFA enrollment (EmailMeForm). Then:
- On the MFA setup page, EmailMeForm shows a QR code and a key you can type instead.
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If the page is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If you'd rather type the key, tap +, then Enter key manually. Fill in Service (for example, EmailMeForm), Account if you like, and paste the key as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz into the confirmation step and select Enable MFA. The code changes every 30 seconds, so enter it before it runs out.
- On the confirmation page, enter your Emergency contact number, with the country and area code. EmailMeForm says it uses this number to check who you are if you lose access.
- Save the recovery codes on the same page, then select Continue.
Those 6-digit, 30-second codes match what Novaz makes from a typed key, though scanning is simpler.
Save the recovery codes right away
The recovery codes appear once, on the confirmation page, and EmailMeForm won't show them again. Each code works a single time (EmailMeForm). Keep them somewhere other than your phone. If you haven't turned on Novaz's iCloud backup or exported a backup file, its keys exist only on that iPhone, so these codes are what gets you back in if the phone is gone. More in 2FA backup codes.
Signing in
Once MFA is on, EmailMeForm asks for a code every time you log in. Enter your email and password, then type the current code from Novaz and select Verify (EmailMeForm). The help doesn't mention a way to remember a trusted browser.
If EmailMeForm rejects your code
The help only warns that each code lasts 30 seconds. If a fresh code still fails, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz shows a warning when the clock is 15 seconds or more off. For other causes, see Authenticator code not working?
Moving to a new phone
EmailMeForm handles this from the account itself. Sign in to the main (master) account, hover over the Accounts icon at the top right, open Users, pick the user, and click Set up MFA on different device. Confirm your current password, then confirm the reset. The old codes and recovery codes stop working, and EmailMeForm sends you straight into a new MFA setup (EmailMeForm).
EmailMeForm suggests logging out and testing the new phone before you delete the entry on the old one. That's good advice if you go this route: add EmailMeForm on the new iPhone through this reset, then remove it from the old one. If you restore a Novaz iCloud backup or backup file on the new iPhone instead, your current EmailMeForm codes keep working and you can skip the reset. See How to transfer your authenticator app to a new iPhone.
The same button works for sub-users. When the account owner resets a sub-user, that person sets up MFA again the next time they log in.
If you lose your authenticator
On the Multi-factor authentication page after your password, click the emergency recovery code link, enter one of your recovery codes, and select Verify (EmailMeForm). Once you're in, set up MFA on your new device with Set up MFA on different device.
If you're a sub-user, the account owner can reset your MFA from Users. If you have no recovery codes left and you're the owner, the help doesn't spell out a process. It says the emergency contact number is there to verify you, and its general sign-in article points to support@emailmeform.com (EmailMeForm). It doesn't say how long a recovery takes. See Lost the phone with your authenticator app?
Turning MFA off
EmailMeForm's help doesn't describe turning MFA off. On Vault accounts it's a requirement of PCI compliance, so expect it to stay on.
Official EmailMeForm help
- How to Set Up MFA with your Vault Enabled Account
- App options for MFA with EmailMeForm
- How to authenticate once the MFA is enabled
- How to use your MFA recovery codes (When you lose your phone)
- How to restore your MFA tokens after switching to a new phone
- Getting Started with Vault
- Unable to Login
- Compliance Plans and Form Builder Plans