General Motors 2FA: how to set up an authenticator app for your GM account
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your GM account is the single sign-in General Motors uses for its owner services: the myChevrolet, myBuick, myGMC and myCadillac apps, your OnStar plan, and GM Rewards (GM, OnStar). The same sign-in can control your vehicle remotely and change your plans (GM), so GM doesn't leave two-factor authentication to you. It's on for everyone, and GM's help is blunt: "You cannot disable MFA." (GM)
What you can choose is where the code comes from. GM starts every account on codes sent by email, and lets you switch to text messages or an authenticator app once you're signed in. This guide shows that switch with Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the GM steps come from General Motors' own support pages on experience.gm.com, chevrolet.com, onstar.com and gm.com, linked below, which we read on October 20, 2026. We haven't tested them on a GM account, and GM's help doesn't show the setup screens, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Switch your GM account to an authenticator app
GM calls the codes multi-factor authentication (MFA). One method is always on, so GM says you must turn off the current one before choosing another (GM).
On the web (GM):
- Sign in at experience.gm.com with your email address and password, and enter the code GM sends you.
- Go to your Account Security page.
- In the Multi-Factor Authentication section, turn off the method you use now. GM's app help says this step is confirmed with a code sent to your email (GM).
- Choose Authenticator App and follow GM's prompts.
In a GM vehicle app, the same settings are under the account menu (the circle with your initials), then Account, then Log In & Security, then Multi-Factor Authentication. Each method has a toggle switch (GM). The myGMC, myBuick and myCadillac help pages give the same path.
GM's help doesn't show the setup screen, so it doesn't say whether you'll get a QR code, a key to type, or both. In Novaz:
- A QR code: tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot and tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- A text key: tap +, then Enter key manually, and type the key as the Setup key. See What is a 2FA setup key?
GM says authenticator codes refresh every 30 seconds, which matches what Novaz uses for a typed key. GM doesn't say how many digits its codes have, so scan the QR code when you can: it carries the exact settings. If GM asks for a code to finish, type the one Novaz shows.
No backup codes
GM's pages don't mention backup or recovery codes. They also say that if you use text messages or an authenticator app and don't have your phone, you won't be able to get into the account, and that you should then contact customer support (GM). GM doesn't describe falling back to email codes at that point.
Novaz keys stay on your iPhone unless you turn on iCloud backup (PRO) or keep a backup file from Export to file…, so weigh that before you leave email codes. Authenticator app vs. SMS covers the trade-offs.
How often GM asks for a code
GM may ask for a code every time you sign in. After you finish MFA in a GM mobile app, the app keeps you signed in for up to a year. On the web, Keep Me Signed In remembers your browser for up to 30 days; GM says not to use it on shared or public devices (GM).
If GM rejects your code
GM's app help suggests checking that the method shown in your account profile is the authenticator, and switching methods if codes keep failing (GM). If the method is right, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
GM doesn't describe a transfer, but you can switch methods while signed in: turn off Authenticator App, confirm with the emailed code, then turn it on again and add it to Novaz on the new iPhone. Do this before you wipe or trade in the old phone. If you have iCloud backup or a Novaz backup file, you can restore your accounts on the new iPhone instead, and GM keeps working without the switch; see How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
GM's only documented route is customer support. The MFA page ends with a Request Support link to GM's support request form (GM). GM doesn't say what proof it asks for or how long it takes.
First, check whether a GM vehicle app on another device is still signed in. The apps stay signed in for up to a year, and their Multi-Factor Authentication settings are where GM says to change methods. More in Lost the phone with your authenticator app?
Turning 2FA off
You can't: MFA is mandatory for every GM account. You can only switch from the authenticator app back to email or text-message codes (GM).
