Skip to content
Novaz AuthenticatorGET

GOV.UK One Login 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. A backup method, not backup codes
  3. When it asks for a code
  4. If GOV.UK One Login rejects your code
  5. Moving to a new iPhone
  6. If you lose your authenticator
  7. Turning it off
  8. Official GOV.UK One Login help

GOV.UK One Login is the sign-in for a growing list of UK government services, and will replace Government Gateway over time (GOV.UK One Login). Two-factor authentication is required: every account needs a way to get security codes, either by text message to a UK mobile or from an authenticator app (GOV.UK One Login).

Since February 2026, text codes only go to UK mobile numbers, and accounts with a foreign number must switch at their next sign-in (GOV.UK One Login). For many people abroad, that leaves the app. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the GOV.UK One Login steps come from GOV.UK's own guidance pages, linked below, and from the wording of the sign-in pages in the source code the GOV.UK One Login team publishes on GitHub. We read them on October 19, 2026. We haven't tested them on a GOV.UK One Login account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

New account: on Choose how to get security codes, pick Authenticator app and select Continue (GOV.UK One Login).

Existing account that gets text messages (GOV.UK One Login):

  1. Sign in at home.account.gov.uk and go to Security.
  2. Under Sign in details, select Manage your sign in details.
  3. Under How you get security codes to sign in, find Your default method and select Use a different default method.
  4. Select Set up an authenticator app, and enter your password if asked (GOV.UK One Login).

Both routes lead to the page Set up an authenticator app:

  1. In Novaz, tap +, then Scan QR code. On the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
  2. Can't scan? Open I cannot scan the QR code for a Secret key, shown in groups of four characters. In Novaz, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
  3. Type the 6-digit code from Novaz under Enter the code and select Continue.

The codes are standard (6 digits, 30 seconds, SHA-1, a 32-character key), so typing the key works too (GOV.UK One Login).

A backup method, not backup codes

GOV.UK's guidance mentions no backup codes. Instead, Add a back-up method in Manage your sign in details adds a second UK mobile or an authenticator app (GOV.UK One Login). An account can only have one authenticator app, so if the app is your default, the backup has to be a UK mobile (GOV.UK One Login). Unless you back up Novaz, its keys are only on your iPhone, so add a UK mobile as your backup if you can.

When it asks for a code

By default, every time you sign in to a service, though services that don't check identity can skip it (GOV.UK One Login). Resetting your password needs one too (GOV.UK One Login). A passkey replaces the password and code at sign-in; they become the fallback behind Sign in another way (GOV.UK One Login).

If GOV.UK One Login rejects your code

GOV.UK says to check you typed the newest code correctly (GOV.UK One Login). For app codes, the usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Too many wrong codes make you wait before trying again (GOV.UK One Login). More in Authenticator code not working?

Moving to a new iPhone

With Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone and keep using the same codes (how to move to a new iPhone). Without one: if the app is your default method, select Change authenticator app in Manage your sign in details while you still have the old phone, enter your password, and scan the new QR code with the new phone. If it's your backup, use Remove back-up method, then add it again (GOV.UK One Login).

If you lose your authenticator

  1. Backup method: on the code page, open I do not have access to the authenticator app and choose try another way to get a security code (GOV.UK One Login).
  2. No backup: in the same place, select check if you can change how you get security codes (GOV.UK's guidance puts it under Problems with the code). This only works if you've already proved your identity with GOV.UK One Login. You prove it again in the GOV.UK ID Check app with photo ID, such as a UK passport, then pick a new way to get codes, which replaces your old ones (GOV.UK One Login, GOV.UK One Login).
  3. Neither works: contact GOV.UK One Login by webchat or phone (weekdays, 8am to 8pm UK time) or by form (email reply within 2 days) (GOV.UK One Login). GOV.UK doesn't say what proof support asks for or how long a reset takes. See also Lost the phone with your authenticator app?

Turning it off

You can't: every account needs a way to get security codes (GOV.UK One Login). You can only switch methods with Use a different default method or Switch back-up and default methods.

Official GOV.UK One Login help

More guides: Developer tools