Envoyer 2FA: how to set up an authenticator app

Envoyer is a zero-downtime deployment service for PHP apps, made by the team behind Laravel (Envoyer). Your Envoyer account can push code to your servers, so it's worth protecting with more than a password. Envoyer's two-factor authentication (2FA) works with an authenticator app on your phone, and its documentation on the topic is very short: one paragraph on the Your Account page (Envoyer). This guide covers what that paragraph says, and is honest about what it doesn't. We use Authenticator App - Novaz on iPhone in the steps, but any authenticator app works the same way.

How we checked this guide: the Envoyer steps come from Envoyer's own documentation, linked below, which we read on October 21, 2026. We haven't tested them on an Envoyer account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

What Envoyer's docs say, and what they don't

The documentation confirms three things (Envoyer):

• 2FA is turned on from the Account page in your user profile.
• After you turn it on, you scan a barcode (a QR code) into an authenticator app on your phone.
• Envoyer suggests apps such as 1Password or Google Authenticator. Any app that makes time-based codes, Novaz included, fits that description.

The docs don't say whether Envoyer shows a text key you can type instead of scanning, whether it gives you recovery codes, how often it asks for a code, or how to get back in without your phone. The sections below say where that leaves you.

Envoyer doesn't document 2FA as required for any feature. If you work on someone else's projects as a collaborator, you still sign in with your own Envoyer account (Envoyer), so the setting is yours to turn on.

Turn on 2FA with an authenticator app

1. Sign in to Envoyer and open the Account page in your profile.
2. Find the two-factor authentication setting and turn it on.
3. Envoyer shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. Novaz adds Envoyer to your list and starts showing 6-digit codes. If Envoyer asks for a code to confirm, type the current one.

Envoyer's docs put the scan after the switch: once you enable 2FA, you scan the code. They don't mention a step where you prove the scan worked. So treat the QR code as something you must capture right away. Don't close the page or sign out until Novaz shows an Envoyer code.

Envoyer's docs don't mention a text key. If you see one and want to type it, tap +, then Enter key manually, and put it in Setup key. Novaz then makes 6-digit codes every 30 seconds, which is what most services use. Since Envoyer doesn't say what its codes look like, scanning is the safer choice: the QR code carries the right settings. More in What is a 2FA setup key?

Plan your backup before you need it

Envoyer's documentation doesn't mention backup or recovery codes. If Envoyer shows you any while you set up 2FA, save them somewhere other than your phone, such as a password manager or a printed copy. They're your way back in if the phone is lost and you haven't backed up Novaz with iCloud backup or Export to file…. See 2FA backup codes.

If Envoyer gives you no codes, the email address on your account is what you'll rely on to prove the account is yours. Make sure it's one you can still get into. You can change it on the same Account page (Envoyer).

If Envoyer rejects your code

Envoyer's docs have no advice on rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Also check you're reading the Envoyer entry and not another account. More causes are in Authenticator code not working?

New iPhone

Envoyer doesn't document a way to move 2FA to another phone. With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone and the Envoyer codes keep working. Without one, you need a fresh setup, and Envoyer's docs don't describe turning 2FA off. So while you can still sign in with the old phone, check the Account page for an option to turn 2FA off and set it up again with the new phone, and if there isn't one, ask Envoyer support (below) before you change phones. Keep the old phone until the new one shows working Envoyer codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Try any recovery codes you saved. Beyond that, Envoyer's docs describe no recovery process, no proof it asks for, and no time frame. The only support route they list is the Support link at the top of the documentation, which emails envoyer@laravel.com (Envoyer). Write from the address on your Envoyer account and explain that you've lost access to your authenticator app.

More in Lost the phone with your authenticator app?

Official Envoyer help

• Your Account
• Collaborators
• Introduction (the page header carries the Support link)