GOG 2FA: how to switch from email codes to an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your GOG account is the one behind the GOG.com store, your library of DRM-free games and the GOG GALAXY app. Two-step login is probably on already: by default, GOG emails you a four-digit code, valid for 15 minutes, when it wants to check that it's you (GOG). Since May 2025 you can use an authenticator app instead, which GOG says is harder to phish (GOG). The catch is that GOG's help says "only one method of authentication can be used at a time" (GOG), so setting up the app means switching the email codes off. GOG's pages don't make 2FA a requirement for anything.
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the GOG steps come from GOG's own help pages and its announcement on GOG.com, linked below, which we read on October 19, 2026. We haven't tested them on a GOG account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
GOG's announcement from May 19, 2025, gives these steps (GOG). Its help page calls them Login and Security and Two-Factor Authentication (GOG), so the labels you see may differ a little.
- Sign in on GOG.com, open Orders & settings, then Login and security. The page is at gog.com/account/settings/security, and the section is also in GOG GALAXY (GOG).
- Find the Two-Factor Authenticator area. It has an Email option and an Authenticator app option.
- Turn off Email first.
- Turn on Authenticator app and follow the instructions on screen.
- GOG shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the six-digit code from Novaz on the GOG page to confirm that the setup works.
- Copy the backup codes GOG gives you and store them somewhere safe.
Between steps 3 and 4 your account has no second step, so finish in one sitting.
GOG's pages only mention the QR code, not a key you can type or how often the codes change. If you do see a key, tap +, then Enter key manually in Novaz and type it as the Setup key (see What is a 2FA setup key?). Scanning is still safer, because the QR code carries the code settings.
Keep the backup codes
GOG's help says the backup codes let you recover your account if you lose the authenticator app (GOG). It doesn't say how many you get, whether each one works only once, or how to get new ones. If you don't back up Novaz with iCloud backup or a backup file, its keys are only on your iPhone, and these codes are your way back. Keep them in a password manager or on paper, not only on the phone. More in 2FA backup codes.
When GOG asks for a code
GOG's help says two things: that two-step login checks you at every sign-in, and that it checks you on a new device, browser or location (GOG). Expect one at least in the second case.
Changing your account's email address can also need your password and a code from the app (GOG).
If GOG rejects your code
GOG's troubleshooting page is about email codes, but note one limit: five sign-in attempts per hour, after which no new email codes come for an hour (GOG). It doesn't say whether this covers authenticator codes, so check before you retry.
With an app, the usual cause is the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
If it still fails, GOG's help says to contact support about any two-step login problem (GOG).
Changing phones
GOG's pages don't explain how to move the authenticator to a new phone. The method is managed in Login and security, so look there while the old phone still works, and keep it until the new one does. If you get stuck, ask GOG support. With Novaz's iCloud backup or a backup file, you restore GOG along with your other accounts on the new iPhone; without one, you add GOG again. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Your backup codes are GOG's documented way back in, though its help doesn't show where you type one. Without them, contact GOG support through its account support form. GOG doesn't say what proof it asks for here or how long it takes. If you lose access to the account's email address instead, GOG says you'll answer a few questions about your profile, and that its staff never ask for your password (GOG).
More in Lost the phone with your authenticator app?
Turning 2FA off
GOG's help says you can turn off two-step login in your account settings, though it advises against it (GOG). The Two-Factor Authenticator area is also where the Email method is switched on and off, according to GOG's announcement.
