Everlaw 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Everlaw is the ediscovery and litigation platform that law firms, government agencies and companies use to review case documents. Its multifactor authentication (MFA) is unusual: by default, the second step is a code sent to your email. An authenticator app is an optional replacement for that email code, which Everlaw calls an "authentication device" (Everlaw).
MFA can also be switched on for you. A Project Admin can require it for everyone on a project, and an Organization Admin can require it across every project in the organization. Those rules override your own choice (Everlaw, Everlaw). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Everlaw steps come from Everlaw's own help center, linked below, which we read on October 21, 2026. The help pages refused our automated requests and no archived copy could be loaded that day, so we read the same articles through the help center's public article feed on support.everlaw.com. We haven't tested them on an Everlaw account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start: SSO accounts
If your organization signs you in through single sign-on (SSO), your identity provider may handle the second factor. Organization Admins can turn on Bypass Everlaw multifactor authentication for authenticated users, and when SSO is required, members can't toggle MFA from their profile pages at all (Everlaw). Accounts that use SSO show an SSO ENABLED flag next to the email address in account settings (Everlaw). In that case, ask your admin rather than following the steps below.
Add an authenticator app
Everlaw's MFA article, last updated in August 2025, describes these steps (Everlaw):
- Open your account page. Everlaw's newer account settings article, from September 2026, says to select the Your Account button with your initials at the top right, then Account Settings (Everlaw). The older MFA article calls this your user profile page and says to click your first name, so the labels may differ.
- If you want MFA on your own account even when your project doesn't require it, check Require Two-Factor Authentication.
- Find the authentication device option and click the green plus icon next to it.
- A window opens with instructions and a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Finish the steps in the window. Everlaw's article doesn't show this last screen. If it asks for a code, type the current one from Novaz.
Everlaw's help doesn't mention a text key you could type instead of scanning, and doesn't say how many digits its codes have or how often they change. Scanning the QR code is the reliable route, because the code carries those settings to Novaz.
Signing in afterwards
Everlaw presents the device as an alternative to the email code. If you check Remember this computer on the sign-in screen, Everlaw skips the code on that computer or tablet for 30 days. That stops working if you clear your browser history, block cookies or switch browsers (Everlaw).
Project-level MFA only asks again when you sign out and come back on a new device (Everlaw).
The email fallback
Everlaw's help pages don't mention backup or recovery codes. Instead, if you don't have your device when signing in, you can click Email a new code on the sign-in page, and Everlaw sends a code to the email address on your account. An email code stays valid for ten minutes (Everlaw).
That makes your email inbox the fallback if you lose your iPhone and have no Novaz backup to restore. Keep access to that inbox. Note that Everlaw only lets you change your email address when MFA is off on your account (Everlaw).
If Everlaw rejects your code
Everlaw's help doesn't cover rejected app codes. Start with the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. If you're stuck, use Email a new code to get in. More causes are in Authenticator code not working?
Changing phones or losing yours
Everlaw doesn't describe moving a device. Based on its help, the way through is to sign in with an emailed code, remove the old device with the Delete this device icon on your account page, and add the new phone with the green plus icon (Everlaw). If you restore a Novaz iCloud backup or backup file on the new iPhone instead, the existing entry keeps working and you can skip this. See How to transfer your authenticator app to a new iPhone.
If the phone is lost, the same email route gets you back in. If you can't reach your email either, Everlaw's help doesn't describe a recovery process for that case, so ask your organization's Everlaw admin or contact Everlaw Support. See Lost the phone with your authenticator app?
Removing the app
Click the Delete this device icon on your account page. Sign-in should then go back to email codes if MFA is still on for you, your project or your organization. Once the device is gone, delete the Everlaw entry in Novaz too: open it and tap Remove account.
