Frontify 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Teams use Frontify to keep brand guidelines, logos and other assets in one place. If you sign in to Frontify with an email address and password, you can protect that login with two-factor authentication (2FA) from an authenticator app. Frontify's help names a few apps as examples, but says any standard TOTP app works (Frontify).
Two things set Frontify apart. First, 2FA only applies to standard users: if your company signs you in with single sign-on (SSO), Frontify's 2FA doesn't apply to you, and your identity provider handles any second step. Second, an admin can turn 2FA on for everyone in your Frontify environment, and then you can't switch it off yourself (Frontify).
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Frontify steps come from Frontify's own Knowledge Base article on 2FA, linked below, which we read on October 21, 2026 (Frontify last updated it on September 23, 2026). We haven't tested them on a Frontify account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Frontify describes these steps (Frontify):
- Click your avatar, which the article places at the bottom left of the screen, then Edit Profile.
- In the side panel, scroll down to the Security section. Next to Two-Factor Authentication, the status reads Enabled or Disabled. Click Enable.
- A pop-up shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the 6-digit code from Novaz into Frontify to finish.
- Frontify then shows 10 recovery codes. Copy them and store them somewhere safe before you close the window.
Frontify's article only describes scanning the QR code. It doesn't say whether the pop-up also offers a key you can type. If it does, tap + in Novaz, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
Frontify also notes that the QR code changes every time the pop-up opens. If you close it and come back, scan the new one, not an old screenshot.
If your admin requires 2FA
Account admins can require 2FA for every user from the Account tab, with a toggle in its Security section. Once that's on, Frontify changes its login screen to ask for the second step, and users who are already working in Frontify get the new prompt too. Admins can see who has 2FA set up under Access Management, on the Users tab (Frontify).
Keep your recovery codes
Each of the 10 codes works once. Frontify says you'll need them if you can't reach your authenticator, for example after changing phones. Unless you turn on iCloud backup or export a backup file in Novaz, its keys stay only on your iPhone, so these codes are your way back in if the phone is gone. Keep them in a password manager or on paper, away from the phone.
If you set up 2FA earlier and never saved codes, or you've used most of them, go back to Edit Profile, scroll to Security, and click Regenerate next to Recovery Codes (Frontify). The article places the profile menu at the bottom left in one section and the top right in another, so check both. More in 2FA backup codes.
If Frontify rejects your code
Frontify's article has no advice on rejected codes. The usual cause is a wrong clock on the phone: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the iPhone's clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone and Frontify's codes keep working. Without one, you'll set Frontify up again on the new phone. Frontify's article mentions removing 2FA and setting it up again, but doesn't walk through the removal, and you can't remove it yourself if your organization requires it. In that case, ask your Frontify admin for a reset: at your next login, Frontify asks you to scan a fresh QR code (Frontify). Keep the old phone until the new one works. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
On the login screen, click Use one of your recovery codes and type one of the codes you saved. Once you're in, you can remove 2FA and set it up again on a new phone, or keep relying on the remaining codes (Frontify).
Without recovery codes, the route is your Frontify admin, not Frontify support. The article says users can't reset or bypass 2FA on their own. An admin opens Access Management, goes to the Users tab, finds you, clicks the three dots and chooses Reset 2FA. If that option isn't there, you haven't set up 2FA yet. After the reset, you set it up again at your next login. This applies to guest users too. Frontify doesn't say what proof your admin should ask for or how long it takes.
More in Lost the phone with your authenticator app?
