Skip to content
Novaz AuthenticatorGET

Envato 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Before you start
  2. Turn on 2FA with an authenticator app
  3. Your backup codes
  4. When Envato asks for a code
  5. If Envato rejects your code
  6. Moving to a new iPhone
  7. If you lose your authenticator
  8. Turning 2FA off
  9. Official Envato help

One Envato account signs you in to the Envato subscription (formerly Envato Elements) and to the Envato Market sites, such as ThemeForest and CodeCanyon. With two-factor authentication (2FA) on, Envato asks for a code from an authenticator app each time you sign in to any Envato product. Its help describes no other method, only one-time backup codes as the fallback, and states that "Any time-based one-time password (TOTP) authenticator app is compatible" (Envato). The steps below use Authenticator App - Novaz on iPhone, and any authenticator app works the same way.

How we checked this guide: the Envato steps come from Envato's own help centers for Envato Market, the Envato subscription and Envato authors, linked below, which we read on October 20, 2026. We haven't tested them on an Envato account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start

  • You sign in with Google, Apple or Facebook. Envato's 2FA only works with a username or email address and a password, so the option stays hidden until you disconnect the social account (Envato). On account.envato.com, go to Account Settings, select Disconnect Account, confirm with Submit, and follow the password reset email. The reverse also holds: with 2FA on, a social sign-in usually fails (Envato).
  • You sell as an Envato author. Your tax summaries (Forms 1099 and 1042, and Australian payment summaries) stay locked in the author dashboard until 2FA is on (Envato).

For everyone else it's optional, though Envato recommends it (Envato).

Turn on 2FA with an authenticator app

These steps combine Envato's newest author page, from October 2026, with its Market help (Envato, Envato):

  1. Sign in at account.envato.com. In the Envato subscription app, you can also click your name in the bottom-left corner and pick My account.
  2. Under Account settings, select Two-factor authentication (2FA), then Enable. Some Envato pages call it Two Factor Authentication.
  3. Envato shows a QR code. In Novaz, tap +, then Scan QR code. Reading Envato on the same iPhone? Screenshot the QR code, then use + > Choose a photo instead. See scanning a QR code on the same iPhone.
  4. Type the code Novaz shows and select Enable.
  5. Envato confirms on screen, lists your backup codes and emails you. Download the codes, then select Done.

Envato's pages don't mention a text key, the code length or how often codes change, so scanning the QR code is the safer route, since the code carries any such settings into Novaz. If a key does appear, + > Enter key manually takes it as the Setup key (What is a 2FA setup key?), but a typed key always gets 6-digit, 30-second codes.

Your backup codes

Each backup code works once and gets you in without the app. They're your way back if the iPhone is lost and you have no Novaz backup (iCloud backup or a backup file), or one that's out of date. Print them or put them in a password manager, not on the same phone. More in 2FA backup codes.

Envato's pages disagree about seeing them again. The subscription help says they can't be recovered after setup, yet also points to Show backup codes (Envato). The Market help, edited more recently, says you can view or replace them any time under Two-Factor Authentication > View backup codes (Envato). A new set cancels all the old codes.

When Envato asks for a code

At every sign-in, on every Envato site. Envato describes no way to skip it on a trusted device. Don't confuse it with Sign In Verification, which emails a passcode when you sign in from an unfamiliar location (Envato). That code is in your inbox, not in Novaz.

If Envato rejects your code

Envato blames most rejected codes on the phone's clock and suggests turning automatic date and time off and on again (Envato). The iPhone version of that switch is Settings > General > Date & Time > Set Automatically. If the clock drifts by 15 seconds or more, Novaz shows a warning. For anything else, read Authenticator code not working?

Moving to a new iPhone

Envato's method is to turn 2FA off, turn it on again, and scan the fresh QR code with the new phone (Envato). If you have a Novaz iCloud backup or backup file, you can restore it on the new phone instead, and your Envato codes keep working. Otherwise, do it while the old iPhone still makes codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with a backup code, turn 2FA off and set it up again on the new phone (Envato). Resetting your password won't skip the code prompt (Envato).

Without backup codes, open a ticket with Envato support and prove the account is yours:

  • Envato Market: your full name, the account's email address, the last item you bought, and a PayPal transaction ID, or for card payments the payment date and the card's last four digits (Envato).
  • Envato subscription: much the same, plus your billing address, last downloaded item and last transaction date (Envato).

Envato gives no time frame, but says missing details can mean extra checks. See Lost the phone with your authenticator app?

Turning 2FA off

On account.envato.com, select Two-factor authentication (2FA), then Disable. Enter your password and select Disable Two Factor Authentication (Envato). Forgot the password? Reset it, sign in with the new one and a code, then turn 2FA off.

Official Envato help

More guides: Business tools and other services