Formspree 2FA: how to set up an authenticator app

Formspree is the form backend that collects submissions from the forms on your website and emails them to you. Its two-factor authentication (2FA) has only one method: a code from an authenticator app on your phone or computer. Formspree doesn't offer text-message codes at all, because of the risk of SIM swapping (Formspree). 2FA is optional, but Formspree strongly recommends it.

This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Formspree steps come from Formspree's own help pages, linked below, which we read on October 21, 2026. We haven't tested them on a Formspree account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Formspree's 2FA article dates from October 2021. It says where the setting is but doesn't name the buttons on the setup screen.

Turn on 2FA with an authenticator app

1. Sign in to Formspree and open your account settings at formspree.io/account. If 2FA isn't on yet, you'll see an option to set it up there (Formspree).
2. Follow the setup screen. Formspree's article doesn't say whether it shows a QR code, a text key or both.
3. If you see a QR code, open Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on your iPhone's own screen, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. If you're given a key to type instead, tap +, then Enter key manually, fill in Service (for example, Formspree) and the key as the Setup key. See What is a 2FA setup key?
5. Enter the 6-digit code that Novaz shows to confirm.
6. Save your backup codes before you leave the page.

From then on, signing in takes your email, your password and a code from Novaz.

Backup codes

Formspree gives you backup codes when you set up 2FA. Unlike many services, it lets you go back and see them later: once 2FA is on, your account settings show the codes again, and the Formspree dashboard shows which ones you've already used. Each code works once, so Formspree suggests marking a code when you use it (Formspree).

There's no button to make a fresh set. When you've used them all, the only way to get new ones is to turn 2FA off and go through setup again (Formspree).

Unless you turn on iCloud backup or export a backup file in Novaz, its keys exist only on your iPhone, so these codes are your way back in if the phone is gone. Keep a copy somewhere other than your phone, such as a password manager or a printout. More in 2FA backup codes.

When Formspree asks for a code

The help article describes the code as part of signing in, after your email and password. It doesn't mention trusted devices or a way to skip the code on a familiar computer.

Formspree also asks for a code to delete your account: under Account, then Delete account, you enter your password and your two-factor code if 2FA is on (Formspree).

If Formspree rejects your code

Formspree's help covers two cases (Formspree):

• The code isn't accepted. Codes depend on the current time, so your device's clock is probably off. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Formspree also points to time.gov for checking your clock. Novaz warns you when the clock is 15 seconds or more off.
• An error says you've already used the code. Formspree accepts each code only once, to block replay attacks. Wait about 30 seconds for Novaz to show a new code, then try that one.

Other causes are in Authenticator code not working?

Changing phones

Formspree doesn't describe moving 2FA to a new phone. Its fix for a lost device, turning 2FA off and setting it up again, works here too while you can still sign in, and it gives you fresh backup codes. If you have a Novaz iCloud backup or backup file, you can skip this and restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

1. Sign in with a backup code. Formspree's advice for a lost phone or computer is to use one of your backup codes, then turn 2FA off and set it up again with your new device (Formspree).
2. No backup codes? Contact Formspree support. The Contact support button is at the top of every page in Formspree's docs. Its support team will need to check other information to confirm the account is yours. Formspree doesn't say which details it asks for or how long it takes, only that "it is a lengthy process to restore account access" (Formspree).

More in Lost the phone with your authenticator app?

Turning 2FA off

Formspree's article mentions turning 2FA off but doesn't give the steps. Look on the account settings page where you turned it on. If you remove Formspree from Novaz afterwards, open the account and tap Remove account.

Official Formspree help

• Setting up 2 factor authentication
• Deleting your account