Gumlet 2FA: how to set up an authenticator app

Gumlet is a video hosting and image delivery platform, and its dashboard at dash.gumlet.com holds your videos, image sources, API keys and billing. Two-factor authentication (2FA) there is optional, and it comes with two limits worth knowing before you start. It only applies if you sign in with a password: accounts that use Google, GitHub or Microsoft to sign in can't add it. And the only method is an authenticator app. Gumlet says text-message and email codes are planned, but they aren't available yet (Gumlet).

This guide uses Authenticator App - Novaz on iPhone. Novaz is just the example here: any app that makes time-based codes works the same way.

How we checked this guide: the Gumlet steps come from Gumlet's own documentation, including its screenshots, linked below, which we read on October 21, 2026. We haven't tested them on a Gumlet account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Gumlet's documentation describes these steps (Gumlet):

1. Sign in to the Gumlet dashboard with your email and password.
2. Open the user menu and choose Two Factor. The page is titled Two-Factor Authentication, and its direct address is dash.gumlet.com/user/two-factor.
3. Click Enable 2FA. Gumlet shows a QR code.
4. In Novaz, tap +, then Scan QR code, and point the camera at the code on your computer screen. If you're looking at the dashboard on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Type the 6-digit code from Novaz into the Enter code box and click Verify.

That's it: 2FA is on, and Gumlet asks for a code from your next sign-in.

The setup screen lists Authy, Google Authenticator and Microsoft Authenticator as examples, but Gumlet says it uses standard TOTP codes, so other apps like Novaz work too. Neither the documentation nor its screenshot of the setup screen shows a text key to type in by hand, so plan on scanning the QR code.

No backup codes in the documentation

Gumlet's documentation doesn't mention backup or recovery codes, and the setup screen in its screenshots goes straight from the QR code to Verify. Unless you turn on Novaz's iCloud backup or keep a backup file, that iPhone is the only thing that can make your Gumlet codes. If it's lost or reset, your way back in is Gumlet support (below). Before you turn 2FA on, make sure you still have access to the email address on your Gumlet account.

When Gumlet asks for a code

Gumlet asks for the code when you sign in, from the first sign-in after you turn 2FA on. Its documentation doesn't mention a "remember this device" option. Gumlet says a sign-in session lasts 14 days and can end early on a device with no activity. Changing your password also signs out every session (Gumlet). Expect a code prompt each time you sign in again after that.

If Gumlet rejects your code

Gumlet's documentation has no advice on rejected codes. The usual cause is the iPhone's clock running a little off. Turn on Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. For other causes, see Authenticator code not working?

Changing phones

Gumlet doesn't document a way to move 2FA to a new phone. With Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone and Gumlet keeps working. Otherwise: the only controls Gumlet describes are turning 2FA on and off, so the practical route is to do it while you still have the old phone: turn 2FA off on the Two Factor page, then turn it on again and scan the new QR code with the new phone. More in How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Without backup codes, the only documented route is Gumlet support at support@gumlet.com. Gumlet restores access "only after a thorough identity check" (Gumlet). Its documentation doesn't say what proof that check asks for or how long it takes. Writing from the email address on your Gumlet account is a sensible start.

See also Lost the phone with your authenticator app?

Turning 2FA off

Open the same Two Factor page and click the red Disabled two-factor authentication button (Gumlet). The label reads oddly, but it's the switch that turns 2FA off. Then open Novaz, tap the Gumlet account and tap Remove account, since its codes no longer do anything.

Official Gumlet help

• Profile Overview (sections "Password and 2FA", "2FA Setup" and "Recovery")
• Active Sessions