Formsite 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Formsite is an online form builder: you use your account to build forms, collect and read results, and run Workflows. Two-factor authentication (2FA) is optional for your own login. It works with a code from an authenticator app on your phone, and Formsite's help names no other second step, such as text messages (Formsite). On Business plans and above, you can also make it mandatory for sub-users.
The one thing to know before you start: Formsite's help doesn't mention backup or recovery codes. Its own warning is blunt. Without your phone, "you won't be able to log in" (Formsite). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Formsite steps come from Formsite's own help center, linked below, which we read on October 21, 2026, through the help center's public article feed and its pages. We haven't tested them on a Formsite account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Formsite's help describes these steps (Formsite):
- Log in to Formsite and open your account's Profile page. This is the same page where you change your password (Formsite).
- Turn on the Two-factor authentication setting. Formsite shows a QR code.
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If you're on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the code from Novaz into Formsite.
- Click Save.
Formsite's help mentions only a QR code, not a text key you could type instead. It also says codes usually change after about a minute, without giving an exact interval. Scanning is the better choice anyway, because the QR code tells Novaz the code settings. A key typed with Enter key manually always gets 30-second codes.
Logging in afterwards
You log in as before, with your username and password. Formsite then adds a step with a Two-factor authentication code box, where you type the current code from Novaz and click Log in (Formsite). The help doesn't mention a way to remember a trusted device, so expect the code at every login.
Formsite also lets you log in with Google, Facebook or Microsoft (Formsite). Its help doesn't say whether the 2FA step also applies to those logins.
Requiring 2FA for sub-users
If your plan has sub-users (Business, formerly Pro 2, or higher), you can require 2FA for any of them. Formsite's help lists this among the sub-user options, which you change by selecting the sub-user on your account's Sub-users page and clicking Save. It doesn't give the exact label. The sub-user is asked to set up an authenticator app at their next login, and needs a code every time after that (Formsite).
The account owner's login is separate from sub-users, so this setting doesn't cover the owner. Turn on 2FA for that login yourself on the Profile page.
If Formsite rejects your code
Formsite's help doesn't cover rejected codes. The most common cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Also type the code that's showing now, not one that's about to change. More causes are in Authenticator code not working?
If you lose your authenticator
There are no backup codes to fall back on, so the route depends on who you are:
- Sub-users: contact the account owner or an Admin sub-user. They can turn 2FA off for you and back on, so you can set it up again on a new phone (Formsite).
- Account owner: Formsite's help doesn't describe a recovery route for a lost authenticator. Its Can't Log In page covers forgotten passwords and links an account recovery form for people who can't remember their email address (Formsite). It doesn't say whether that form or Formsite support can remove 2FA, what proof they ask for, or how long it takes.
Because of that, an Admin sub-user is worth having if your plan allows one. Also see Lost the phone with your authenticator app?
Changing phones or turning 2FA off
Formsite's help only describes turning the setting on. It doesn't explain how to turn it off or move it to a new phone. The safe approach is to do any change while you can still log in with your current phone. With a Novaz iCloud backup or backup file, you can restore Formsite on a new iPhone and keep the same codes. Without one, you'll set Formsite up again there from a new QR code. See How to transfer your authenticator app to a new iPhone.