Fastly 2FA: how to set up an authenticator app

Your Fastly login opens the control panel at manage.fastly.com, where you manage your services, and the Fastly support portal too. Its two-factor authentication (2FA) uses an authenticator app, with recovery codes as the fallback; the help pages don't mention text messages (Fastly). Two things stand out: setup gives you a QR code and nothing else, and recovery codes must be used in the order they were shown.

Fastly recommends Google Authenticator or Duo Mobile, but any authenticator app works the same way. This guide uses Authenticator App - Novaz on iPhone.

How we checked this guide: the Fastly steps come from Fastly's own documentation, linked below, which we read on October 20, 2026. We haven't tested them on a Fastly account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Your company may require it

A superuser on your company account can switch on Company-wide two-factor authentication. Anyone signed in without 2FA is then logged out and has to set it up at the next login, and nobody can turn it off for their own login (Fastly). Otherwise, 2FA is your choice.

Turn on 2FA with an authenticator app

Fastly's documentation lists these steps (Fastly):

1. Sign in to the Fastly control panel and go to Account > Profile & security.
2. Click Two-factor authentication. Fastly's steps list this label twice, so click it again on the page that opens.
3. Click Continue and confirm your login details again.
4. The Set up two-factor authentication page shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it.
5. Type the code from Novaz in the One-time code field.
6. In Device name, enter a name for your phone, then click Continue.
7. Click Finish setup. 2FA applies from your next login.
8. Generate your recovery codes (next section). Fastly treats this as a separate last step.

Neither the steps nor Fastly's screenshot of the setup page show a text key to type instead. If Fastly is open on the same iPhone as Novaz, take a screenshot of the QR code, then tap + and Choose a photo. See scanning a QR code on the same iPhone.

A Signal Sciences (Next-Gen WAF) account that isn't linked to Fastly has its own setup, which does offer Enter code manually (Fastly).

Make recovery codes, and keep them in order

Go back to Two-factor authentication, click Generate new recovery codes, then Download recovery codes, and finish with I've saved my recovery codes (Fastly).

Fastly accepts these codes only in the order they appeared on screen. Type one out of turn and you get an invalid code error, with a request for the next valid one. Keep the file as it is and cross codes off from the top. Each code works once, and a new set cancels the unused old ones.

They're your way back in if the phone is lost and you have no Novaz backup, or one made before you added Fastly. Store them in a password manager or on paper. More in 2FA backup codes.

When Fastly asks for a code

• At login, in the Authentication code field, then Complete login (Fastly). Each computer and browser asks at least every 14 days.
• Right after you turn it on, in any other browser window where you're signed in.
• When you switch between company accounts.
• When you create an API token through the API, in a Fastly-OTP header (Fastly).

If Fastly rejects your code

Fastly's one hint, written for Google Authenticator users, is that a time sync problem often makes codes fail. That applies to any app. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. More in Authenticator code not working?

Changing phones

Fastly doesn't describe moving 2FA to a new phone. While you still have the old one, turn 2FA off and set it up again on the new phone. If your company enforces 2FA, ask a superuser to reset it: Fastly names switching devices as a reason for a reset (Fastly). If you restore a Novaz iCloud backup or backup file on the new iPhone instead, your Fastly codes keep working and you can skip this. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Fastly covers three cases (Fastly):

• You have recovery codes. Sign in with the next one. If the phone is gone for good and you have two or more left, sign in with one and use another to turn 2FA off. Then set it up on the new phone and make fresh codes.
• No codes, but another superuser. They can reset your 2FA under Account > User management (Reset 2FA, or Disable 2FA if 2FA isn't enforced company-wide).
• No codes, and you're the only superuser. Contact Fastly Customer Support. Fastly confirms by phone that you belong to the company, using contact details from your company's website or your Fastly account, then sends you a recovery code and resets your password. It doesn't say how long this takes.

More in Lost the phone with your authenticator app?

Turning 2FA off

Under Two-factor authentication, click Disable two-factor authentication, enter a code from Novaz (or a recovery code) in Your authentication code, and click Disable (Fastly). You can't do this while company-wide 2FA is on. Afterward, open Fastly in Novaz and tap Remove account.

Official Fastly help

• Managing two-factor authentication
• Administering two-factor authentication
• Troubleshooting your login
• Logging in and switching between Fastly accounts
• User tokens
• Enabling and disabling two-factor authentication (Signal Sciences accounts)