FastComet 2FA: how to set up an authenticator app

FastComet is a web hosting company, and your FastComet Client Area is where you pay invoices, manage domains and reach your hosting services. FastComet's two-factor authentication (2FA) is optional and off until you turn it on. It uses time-based codes: 6 digits that change every 30 seconds, from an app on your phone (FastComet). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the FastComet steps come from FastComet's own tutorials and blog, including the screenshots in its 2FA tutorial, linked below, which we read on October 22, 2026. We haven't tested them on a FastComet account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

FastComet's 2FA tutorial was last updated on October 10, 2023, so the screens may have changed since. This guide covers the Client Area sign-in on fastcomet.com. cPanel, the control panel for your hosting, has its own separate 2FA with its own steps (FastComet).

Turn on 2FA with an authenticator app

FastComet's tutorial describes these steps (FastComet):

1. Sign in to the FastComet Client Area, ideally on a computer.
2. Open the menu with your name in the top right corner and choose Account Security.
3. Under Configure Two-Factor Authentication, click Enable.
4. Read the overview page and click Get Started.
5. The Time-based One-Time Password page shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the page is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
6. If you can't scan it, use the secret key printed on the same page. In Novaz, tap +, then Enter key manually, type FastComet as the Service, and paste the key into Setup key. See What is a 2FA setup key?
7. Click Continue under the QR code.
8. Type the current 6-digit code from Novaz and click Continue.
9. FastComet confirms that the code checked out and shows your backup code on the same page. Write it down before you leave.

From then on, the Client Area asks for your password and a code from Novaz.

Your one backup code

FastComet gives you a single backup code, not a list. Its tutorial calls it a permanent PIN that gets you in if you lose your phone, and recommends writing it down and storing it safely (FastComet). The tutorial doesn't say whether the code changes after you use it, or how to see it again later.

If you lose the phone and have no Novaz backup, or one older than your FastComet entry, this code is your way back in. Keep it somewhere other than your phone. More in 2FA backup codes.

Signing in afterwards

Enter your email address and password and click Login as usual. The form reloads with a Your Two-Factor Code field (FastComet). Open Novaz, type the current code and confirm.

You may also see a different prompt. Since June 2023, FastComet emails a five-digit code when you sign in from an IP address it doesn't recognize. That code is valid for five minutes, and you can ask FastComet to remember the device for 60 days (FastComet). It's a separate check from your authenticator: the 5-digit email code goes in its own box, and the 6-digit code from Novaz goes in Your Two-Factor Code.

Sub-accounts

If other people reach your Client Area through sub-accounts, you allow 2FA for each of them first. Open Contacts/Sub-accounts, pick the sub-account and tick the Two-Factor Authentication box. The sub-account holder then signs in and follows the same setup steps on their own phone (FastComet).

If FastComet rejects your code

FastComet's tutorial warns that each code only lasts 30 seconds, so wait for a fresh one if the timer is nearly out. If codes keep failing, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

If you lose your authenticator

Use your backup code. The tutorial's screenshot of the sign-in page shows Can't Access Your 2nd Factor Device? with a Login using Backup Code link under the code field (FastComet).

Without the backup code, FastComet's Client Area pages don't describe a recovery process, what proof support asks for, or how long it takes. FastComet's Security Token, the PIN that proves you own the account when you contact support by live chat or phone, is only shown inside the Client Area (FastComet). It won't help once you're locked out. See Lost the phone with your authenticator app?

Changing phones or turning 2FA off

FastComet doesn't describe moving 2FA to a new phone. Its tutorial does cover turning it off: open Account Security from the menu in the top right, click Disable, and enter your Client Area master password, the one you use to sign in on fastcomet.com (FastComet). With your old phone still at hand, you can turn it off, then enable it again and scan with the new iPhone.

If you have a Novaz iCloud backup or backup file, restore it on the new iPhone instead and your accounts keep working. Without one, every account needs the same treatment on a new phone. See How to transfer your authenticator app to a new iPhone.

Official FastComet help

• Enabling Two-Factor Authentication
• Security Token/Support PIN
• Increasing FastComet Customer Login Security
• Better Security for Your Account with Two-Factor Authentication
• How to Setup and Manage Two Factor Authentication for cPanel