Flourish 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Flourish is the web tool newsrooms, companies and individuals use to build charts, maps and data stories. If you sign in with an email address and password, you can add two-factor authentication (2FA) to that login, and the only method Flourish's help describes is an authenticator app (Flourish). It's optional for most people, but a company or newsroom account can make it compulsory for its members (Flourish). Flourish's help pages don't mention backup codes, so plan for a lost phone before you need to.
The steps below use Authenticator App - Novaz on iPhone. Any authenticator app that reads a QR code will work the same way.
How we checked this guide: the Flourish steps come from Flourish's own help center, linked below, including the screenshots in its articles, which we read on October 21, 2026. The article pages refused automated requests, so we read them through the help center's public article feed on helpcenter.flourish.studio, which serves the same text. We haven't tested them on a Flourish account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Flourish's help article describes this flow (Flourish):
- Sign in to Flourish, hover over your username in the top-right corner, and choose My account from the menu.
- Under Private Info, find the two-factor row and click Enable. The article's text calls it Two-factor verification, while its screenshot shows Two-factor authentication, so look for either one.
- A Set up two-factor authentication window opens with a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it.
- Under Step 2, type the 6-digit code that Novaz shows and click Enable.
Your My account page should now show the setting as Enabled.
Flourish's article and screenshots show only the QR code. They don't mention a text key you could type instead, so scanning is the way in. If you're using Flourish on the same iPhone that has Novaz, take a screenshot of the QR code, then in Novaz tap + and Choose a photo. See scanning a QR code on the same iPhone.
Signing in afterwards
The next time you log in, after your email and password, Flourish shows a Two-factor authentication screen asking for the 6-digit code from your app. Type the current code from Novaz and click Continue. Back to Login takes you back to the start (Flourish).
If your company signs you in with single sign-on (Continue with SSO), the code check is handled by your company's identity provider, not by Flourish's own 2FA (Flourish).
No backup codes
Neither Flourish article mentions backup or recovery codes, and they don't describe a second method such as text messages. With Novaz that matters, because without an iCloud backup or a backup file, its keys exist only on your iPhone. Your way back in depends on who can reset the setting for you, which the next section covers. For general advice, see 2FA backup codes.
If you lose your authenticator
Who can help depends on your account type (Flourish, Flourish):
- You're in a company or newsroom account that requires 2FA: any company admin can reset it. Admins have an ADMIN marker in the member list on the My company page, which also shows their email addresses. An admin hovers over your name in that list, clicks the Reset MFA icon and confirms. At your next login, Flourish asks you to set up 2FA again.
- Everyone else: email Flourish support at hello@flourish.studio. The enable article says that if 2FA gives you trouble, the team "may be able to help".
Flourish doesn't say what proof it asks for or how long a reset takes. More in Lost the phone with your authenticator app?
Changing phones
Flourish's way to switch apps or phones is to turn 2FA off and set it up again. On My account, click Disable, then Enable to scan a fresh QR code with the new phone (Flourish). Do it while the old phone still works. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead and skip the re-setup. See How to transfer your authenticator app to a new iPhone.
If your company requires 2FA, you won't see a Disable button. Ask a company admin to reset it instead, then set it up on the new phone at your next login. After that, open the old Flourish entry in Novaz and tap Remove account.
If Flourish rejects your code
Flourish's help pages don't cover rejected codes beyond pointing to hello@flourish.studio. First check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. If you've set Flourish up more than once, make sure you're reading the entry you added most recently and remove older ones. Other causes are in Authenticator code not working?
Turning 2FA off
On My account, click Disable next to the two-factor setting. If your company requires 2FA, the button isn't there, and only an admin's reset clears it, after which you'll be asked to set it up again (Flourish).
