Heimdal 2FA: how to set up an authenticator app for the Heimdal Dashboard

The Heimdal Dashboard is the web console for Heimdal's business security platform. Companies, resellers and distributors use it to manage the Heimdal Agent on their devices. You don't sign up for it yourself: an account manager or an admin creates your account, and Heimdal emails you the details. Two-factor authentication (2FA) with an authenticator app is part of that first sign-in, unless whoever created your account turned it off (Heimdal, Heimdal).

Heimdal's help pages only describe Google Authenticator, but the Dashboard shows a standard QR code and secret key, so any authenticator app can read it. This guide uses Authenticator App - Novaz on iPhone. Other apps work the same way.

How we checked this guide: the Heimdal steps come from Heimdal's own help center articles and their screenshots, linked below, which we read on October 21, 2026. The help center blocks automated page requests, so we read the same articles through its public article feed on support.heimdalsecurity.com. We haven't tested the steps on a Heimdal account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Set up the authenticator during account activation

Heimdal sends three emails when your account is created: an account confirmation, your initial password, and a setup email. The confirmation link works only once, so don't click it until you have time to finish (Heimdal).

1. In the confirmation email, click CONFIRM ACCOUNT.
2. On the Almost done! page, fill in Current password (from the initial password email), New password and Confirm new password. The new password needs at least 12 characters and at least three kinds of characters.
3. The same page shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at your computer screen. If you're on the iPhone itself, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
4. Next to the QR code there's a Secret key field with a copy button. If you can't scan, tap +, then Enter key manually in Novaz, and paste it as the Setup key. See What is a 2FA setup key?
5. Type the code from Novaz in Enter your generated code and click Submit.

Heimdal's screenshots show 6-digit codes under the name HeimdalSecurity, but its help doesn't state the interval. Scanning the QR code is the safer choice, because it passes those settings to the app.

Each time you sign in

After your password, the Dashboard asks for a code in Enter your generated code (Heimdal). The Privileged Access Management mobile app uses the same Dashboard credentials and has a Two-factor verification field for the same code. If 2FA is off for your account, leave that field empty (Heimdal).

If your company signs in through Azure (Microsoft) Login instead, Microsoft may ask for its own second step (Heimdal). Heimdal's pages don't say whether the Dashboard code is still asked for in that case.

No backup codes

Heimdal's help doesn't mention backup or recovery codes. Unless you have a Novaz backup (iCloud backup or a backup file), its keys are only on your iPhone, so your fallback is the reset link and your admin, described below.

If Heimdal rejects your code

When a code fails, the page shows Invalid authenticator code. Heimdal suggests opening the Dashboard in a new tab and trying again. If that doesn't help, reset your 2FA and set it up again (Heimdal).

Heimdal also blames bad codes on time sync. On iPhone, its fix is Settings > General > Date & Time > Set Automatically (Heimdal). Novaz also warns you when your clock is 15 seconds or more off. More causes are in Authenticator code not working?

Lost phone or new iPhone

Under the code box on the sign-in screen there's a link, Reset your two-factor authentication. Heimdal's help says to use a reset and then configure the app again, but it doesn't describe what the reset asks for or whether it sends an email (Heimdal).

If the reset doesn't get you in, two other routes exist. An admin whose role allows it can tick Do not require 2-Factor on your account, which turns off the code at sign-in (Heimdal, Heimdal). Otherwise, contact the HEIMDAL Security Support Team (Heimdal). Heimdal doesn't say what proof it asks for or how long it takes.

With a Novaz iCloud backup or backup file, you can restore your accounts on a new iPhone. Without one, keep the old phone working until you've reset Heimdal's 2FA and scanned the new QR code. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

Turning 2FA off

Heimdal's help doesn't describe a switch in your own profile. What it documents is the Do not require 2-Factor box in Miscellaneous Settings on the account, set by an admin when creating or editing it (Heimdal). Heimdal's help says that after a password reset with Forgot Password, you should also set up 2FA if it's enabled (Heimdal).

Official Heimdal help

• Set up the 2-Factor Authenticator
• Log in to the HEIMDAL Dashboard
• How do I fix the Google Authenticator that generates invalid codes?
• Creating a new HEIMDAL Dashboard account
• HEIMDAL Dashboard login & user account issues
• HEIMDAL Dashboard overview
• Privileged Access Management app (iOS / Android)
• Azure Login (Single Sign-On)