Skip to content
Novaz AuthenticatorGET

Facebook 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. Save your recovery codes
  3. When Facebook asks for a code
  4. If Facebook rejects your code
  5. Moving to a new iPhone
  6. If you lose your authenticator
  7. Turning 2FA off
  8. Official Facebook help

Facebook's two-factor authentication (2FA) setting is in Meta's Accounts Center, the settings hub it shares with Instagram and Threads. Meta is gradually moving people to Meta Account settings, so you may see that name instead (Facebook). Each account there has its own 2FA setting, so turning it on for Facebook doesn't cover your Instagram (Meta).

2FA is optional, except that accounts Meta requires to use Advanced Protection, such as politicians, journalists and some advertisers, need 2FA or a passkey (Facebook). Facebook offers three methods: a security key, text message (SMS) codes, or a third-party authentication app (Facebook). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Facebook steps come from Facebook's own Help Center and Meta's help pages, linked below, which we read on October 19, 2026. We haven't tested them on a Facebook account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

You can only add an app while you can still sign in. On a computer, Facebook's help gives these steps (Facebook):

  1. Click your profile picture in the top right, then Settings & privacy, then Settings.
  2. Click Accounts Center, then Password and security.
  3. Click Two-factor authentication, then your Facebook account.
  4. Click Authentication app, follow the setup instructions, and click Next.
  5. Enter the code from Novaz and click Next.

In the iPhone app, the same article starts with Menu, then Settings & privacy, Settings and Password and security. Another article adds Accounts Center to that path, so your menus may differ (Facebook).

Facebook also notes that "Not everyone will be able to access this setting" in Accounts Center yet. Its fallback: Security and Login Settings, Edit next to Use two-factor authentication, then Use Authentication App (Facebook).

Add Facebook to Novaz

Facebook's help doesn't say whether setup shows a QR code, a key to type, or both. Use what you get:

  • QR code on a computer: in Novaz, tap +, then Scan QR code.
  • QR code on the same iPhone: likely if you set up in the iPhone app. Take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
  • A key to type: tap +, then Enter key manually, and fill in Service, Account (optional) and Setup key. See What is a 2FA setup key?

Facebook doesn't give its code settings. A typed key always makes 6-digit, 30-second codes, so scan a QR code when you can.

Save your recovery codes

With 2FA on, you can get 10 recovery codes, each usable once instead of an app code (Facebook):

  1. Go to Accounts Center > Password and security > Two-factor authentication and pick your account. You may need your password again.
  2. Below How you get login codes, click Additional methods, then Recovery codes.
  3. Click Get new codes (the iPhone app may show Show codes), then print or write them down.

Keep them away from your phone. They're your way back in if it's lost and you have no Novaz backup, or one made before you added Facebook. More in 2FA backup codes.

When Facebook asks for a code

Facebook asks for a code, or a login approval, on a browser or device it doesn't recognize. Save this browser skips the code there next time; don't use it on a shared computer (Facebook). Private browsing, or clearing history on close, can mean a code every time (Facebook).

If Facebook rejects your code

Facebook's help doesn't cover rejected app codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Moving to a new iPhone

Facebook's help says you can set up an authentication app on a new device once you're logged in (Facebook). Do it before you wipe the old phone. If you restore a Novaz iCloud backup or backup file on the new iPhone, your Facebook codes come with it and you don't need a new setup. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Facebook suggests these, in order (Facebook):

  1. A recovery code, typed in place of the app code.
  2. Approve the login in Facebook's notifications on another device where you're still logged in.
  3. Confirm your identity. On the code screen on a computer, click Need another way to authenticate?, then Other Options, then Get more help. On iPhone, tap Need help? Facebook may ask for a photo of a government-issued ID.

Facebook says it usually replies within 1-2 business days, to the email address or phone number on your account. Identity confirmation isn't available in Facebook Lite. More in Lost the phone with your authenticator app?

Turning 2FA off

Facebook's help gives no steps for this. It only says you can turn 2FA off in your settings, and that Meta recommends keeping it on (Facebook).

Official Facebook help

More guides: Messaging and social