Enom 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Enom is a domain registrar, and its account is where you register and renew domains, edit DNS and, if you're a reseller, run your domain business. Two-factor authentication (2FA) is optional, and Enom offers one kind: a time-based code from an authenticator app on your phone. In the account it's called Two-Step Verification (Enom).
The detail to plan around is the backup codes. Enom's help says that if you lose your phone and can't sign in, those codes are the only way to turn 2FA off. Enom's support pages don't describe any other way back in.
This guide uses Authenticator App - Novaz on iPhone for the app steps. Any authenticator app works the same way.
How we checked this guide: the Enom steps come from Enom's own help pages on support.enom.com, linked below, which we read on October 21, 2026. We haven't tested them on an Enom account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Enom's help describes these steps (Enom):
- Sign in to your Enom account. Select My Account in the top right, then Account Settings.
- Open the Two-Step Verification tab.
- Type a nickname for your phone, then click Add Device.
- Enom shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If you're on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If the QR code won't scan, click Problems with QR code?. Enom then shows a secret key. In Novaz, tap +, then Enter key manually, put "Enom" under Service, and type the key as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz and click Verify Code.
- Click Show Backup Codes, then print or save them (next section).
Enom's help says the codes have 6 digits but doesn't say how often they change. Scanning the QR code is the safer route, because it passes the exact code settings to your app. A key typed by hand gets 6 digits every 30 seconds.
Save the backup codes before you close the tab
Enom's help warns that if you lose your phone or app and can't sign in, the backup codes are the only way to disable 2FA, and suggests keeping them apart from your phone (Enom).
Keep them even if you back up Novaz: they're what gets you in if the phone is lost and you have no Novaz backup, or one made before you added Enom. Keep them in a password manager or on paper. Enom's help doesn't say how many codes you get, whether each works once, or whether you can make new ones. More in 2FA backup codes.
Signing in with 2FA on
Enom asks for a code at every sign-in. You enter your login ID (not your email address) and password and click Login, then type the 6-digit code from your app and click Login again (Enom, Enom). The help pages don't mention a way to remember a trusted device.
Enom also has Account Validation, a separate setting on another tab of Account Settings that adds security questions (Enom). Enom suggests using both. For reseller accounts, the security questions come up at every sign-in too, so you may be asked for a code and for answers.
Reseller accounts
A reseller account signs in at cp.enom.com, and Enom says it doesn't support multiple users: everyone who manages it uses the same login. Enom strongly recommends both two-factor authentication and account validation for these accounts (Enom). With Novaz, the key lives on the iPhone that scanned it and in any Novaz backup made from it, so agree on who holds that phone, the backup and the backup codes before you turn it on.
If Enom rejects your code
Enom's help gives no advice for a rejected code. The usual cause is a phone clock that has drifted. On your iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Enom's help doesn't cover moving 2FA to a new phone. The controls it documents are Disable and Add Device, both on the Two-Step Verification tab. While you can still sign in on the old phone, one way is to disable 2FA and then set it up again with the new phone, which gives you a new QR code. If you have a Novaz iCloud backup or backup file, you can restore it on the new iPhone instead and skip this. Without one, you'll need to do it. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with your login ID and password, then use a backup code where Enom asks for the security code. Once you're in, you can disable 2FA on the Two-Step Verification tab and set it up again.
If you don't have them, Enom's help doesn't describe a recovery process. Its contact page lists chat, support requests and phone lines for Enom (resellers) and EnomCentral (single domain owners). It asks you to confirm you can access your account before you get in touch, and an advisor can trigger a PIN check that you see in your signed-in account (Enom). It doesn't say whether support can reset 2FA. More in Lost the phone with your authenticator app?
Turning 2FA off
Go to My Account > Account Settings > Two-Step Verification and click Disable. Enom then stops asking for the code at sign-in (Enom). Then open the Enom entry in Novaz and tap Remove account.
