Skip to content
Novaz AuthenticatorGET

GoDaddy 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Step 1: add the authenticator app
  2. Step 2: switch on 2-Step Verification
  3. No backup codes: add a second method
  4. When GoDaddy asks for a code
  5. If GoDaddy rejects your code
  6. Changing phones
  7. If you lose your authenticator
  8. Turning 2FA off
  9. Official GoDaddy help

Your GoDaddy account holds your domains, hosting and billing, so it's worth protecting. GoDaddy's two-factor setup has two layers, and it's easy to stop after the first. A verification method, such as an authenticator app, only makes GoDaddy check it's you for high-risk actions, like changing your password, or suspicious sign-ins. For a code at every sign-in, you also switch on 2-Step Verification, a separate setting (GoDaddy).

Both are optional. The methods are the GoDaddy app, which GoDaddy recommends, a third-party authenticator app, a passkey or security key, and text messages (GoDaddy). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the GoDaddy steps come from GoDaddy's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a GoDaddy account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Step 1: add the authenticator app

From GoDaddy's help (GoDaddy):

  1. Go to your GoDaddy Security page (account.godaddy.com/security) and sign in if asked.
  2. In the Security list, below Verification Methods, select Add verification method.
  3. Choose Authenticator app, then Next.
  4. GoDaddy shows a barcode (a QR code). In Novaz, tap +, then Scan QR code. If the code is on the same iPhone, take a screenshot and use Choose a photo (how).
  5. Enter the 6-digit code from Novaz, plus a name for the app, such as Novaz. Select Next.

The app then appears in your list of verification methods.

GoDaddy's help doesn't mention a key you can type instead of scanning. If one is offered, tap + in Novaz, then Enter key manually, and enter it as the Setup key (setup keys).

Step 2: switch on 2-Step Verification

This needs at least one verification method (GoDaddy).

  1. Go back to the Security page.
  2. Below Enhanced Security, turn on the 2-Step Verification toggle.

GoDaddy then asks for your default method at every sign-in. Its help doesn't say how the default is picked, but Try another way on the code screen lets you choose another method (GoDaddy).

No backup codes: add a second method

GoDaddy's help doesn't mention backup codes. Its backup is a second verification method, ideally on a different device. A passkey can't be your only method (GoDaddy).

Novaz keys stay on your iPhone unless you turn on iCloud backup (PRO) or export a backup file, so pick a backup that doesn't depend on that iPhone, such as a security key or a phone number you could move to a new SIM. Internet numbers like Google Voice don't work for GoDaddy's text codes (GoDaddy).

When GoDaddy asks for a code

  • Sign-in: every time with 2-Step Verification on, otherwise only when a sign-in looks suspicious (GoDaddy).
  • High-risk actions, such as a password change, in both cases.
  • Domain changes: with Domain Protection, actions like DNS edits or transfers need a one-time password by email. Once 2-Step Verification has been on for 24 hours, GoDaddy uses it instead (GoDaddy).
  • Support: GoDaddy Guides confirm it's you with a code from your authenticator app (GoDaddy). Share one only in a chat or call you started.

If GoDaddy rejects your code

GoDaddy's troubleshooting covers text codes that don't arrive, not failing authenticator codes. Check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when it's 15 seconds or more off. More causes: Authenticator code not working?

Changing phones

GoDaddy has no page on this, but it documents removing and adding methods. While you still have the old iPhone, on the Security page select Edit next to the authenticator, then Remove and Confirm Deletion. Add it again with Add verification method, scanning with Novaz on the new iPhone. Removing your only method also turns off 2-Step Verification, so switch it back on (GoDaddy).

With Novaz's iCloud backup or a backup file, you can skip that and restore your accounts on the new iPhone. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

GoDaddy's route (GoDaddy, GoDaddy):

  1. With a backup method: at the code prompt, select Try another way, pick the backup and select Continue.
  2. Without one: select Recover your account (under Try another way if you have backups). GoDaddy checks who you are, possibly with biometrics through its vendor Persona. If that works, you're back in, but all your verification methods are removed.
  3. If it fails: below Could not verify your identity, select Continue, complete the Account Recovery form and select Submit Recovery Request. GoDaddy says it replies within 48 hours.

Account Recovery needs a color copy of a government-issued photo ID with your name, signature, date of birth and issue and expiration dates, plus business documents if a company is on the account (GoDaddy). More in Lost the phone with your authenticator app?

Turning 2FA off

Turn off the 2-Step Verification toggle. Your methods stay, so GoDaddy still checks high-risk actions (GoDaddy). To delete the authenticator, use Edit, Remove and Confirm Deletion (GoDaddy), then tap Remove account on the GoDaddy entry in Novaz.

Official GoDaddy help

More guides: Domain registrars