Evernote 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Evernote account holds your notes on the web, desktop and mobile apps. Evernote calls its two-factor authentication (2FA) two-step verification. It's optional, and the only way to get codes is an authenticator app. Evernote stopped sending them by text message in August 2023 (Evernote). Its security page says the codes are time-based (TOTP) (Evernote). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Evernote steps come from Evernote's own help center and security page, linked below, which we read on October 20, 2026. We haven't tested them on an Evernote account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Evernote's help describes these steps (Evernote):
- Sign in to your account settings.
- Choose Account Security in the menu, then Enable next to Two-Step Verification.
- Verify your email address when Evernote asks.
- Evernote shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Evernote then shows your backup codes. Save them, then paste one into the next window to finish. That code still works afterwards.
Evernote's page doesn't say whether it also shows a key to type, or how often codes change, only that each code is valid for one minute. So scan the QR code: it carries Evernote's settings, while Enter key manually always gives 6 digits every 30 seconds. To check, tap the account in Novaz and look at Interval under Details. See What is a 2FA setup key?
Keep the backup codes out of Evernote
Each backup code works once. When you run out, make a new set: in Account Security, choose Manage next to Two-step verification, then Manage settings, View backup codes and Generate backup codes (Evernote).
Evernote asks you not to keep them in your Evernote account, since you need them when you can't get in. They're your spare if you lose your iPhone without a Novaz backup, or with one made before you added Evernote. See 2FA backup codes.
Signing in afterwards
With two-step verification on, Evernote asks for your password and a code every time you sign in, on any device (Evernote). Its help doesn't mention remembering trusted devices. Some cases differ:
- Google or Apple sign-in. The second step comes from that account's own two-step verification, so turn it on there too (Evernote, Evernote). Linking an Apple account while Evernote's two-step verification is on fails with Linking unavailable: turn it off first.
- Evernote Teams with required SSO. Your company's identity provider handles sign-in, and Evernote's own two-step verification no longer applies (Evernote).
- Scanners and partner apps that can't take a code reject your correct password. Make an application password: Account Security > Manage next to Two-step verification > Generate New Application Password, and use it in that app (Evernote).
If Evernote rejects your code
Evernote's troubleshooting page suggests (Evernote):
- Type the code right away. Evernote says it's valid for one minute.
- Leave out spaces and hyphens.
- Make sure your phone's clock updates automatically. On iPhone: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.
Other causes are in Authenticator code not working?
Turning 2FA off or changing phones
On the web, go to Account Security > Manage next to Two-step verification > Manage settings > Disable Two-Step Verification (Evernote). Evernote 11.30 or later also has this in the apps (below). Then open Evernote in Novaz and tap Remove account.
For a new phone, Evernote's answer is to turn two-step verification off this way and on again with the new phone. Do it before you wipe the old iPhone, since you need its code or a backup code to get in. If you restore a Novaz iCloud backup or backup file on the new iPhone, your Evernote codes keep working and you can skip this. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Evernote's setup page warns that without a code or a backup code, "you will lose access to your account" (Evernote). Its troubleshooting page still lists options (Evernote):
- Use a backup code. At the code prompt, choose Need help getting a verification code?, then Use a back-up code. The setup page words it slightly differently.
- Use a device that's still signed in. Desktop app: Settings > Login & security > Disable two-factor authentication. Mobile app: the same option under Settings > More Settings > Security. Both need Evernote 11.30 or later, still rolling out. On Evernote Web, use Security Summary, as this page calls it.
- Sign in with Google or Apple, if one is connected to your account.
- Contact Evernote support through the form linked from that page. Evernote asks for your account email, payment receipts (plus the card's last four digits and expiry date if you paid by card), and the cities or regions, devices, and IPv4 and IPv6 addresses you used in the last 30 days. If you once got codes by text, add that phone number.
Evernote doesn't say how long support takes. More in Lost the phone with your authenticator app?
