Hevo Data 2FA: how to set up an authenticator app

Your Hevo Data account holds the connections to your databases, SaaS tools and warehouses. Hevo's two-factor authentication (2FA) uses a code from an authenticator app on your phone, on top of your email address and password. Hevo's help names Google Authenticator, but says any equivalent app works (Hevo Data). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

Hevo moved its settings into a new Settings sidebar on October 12, 2026, so older screenshots may not match. And once 2FA is on, you can't use social sign-in, such as Google or Facebook.

How we checked this guide: the Hevo Data steps come from Hevo Data's own documentation, linked below, which we read on October 21, 2026. We haven't tested them on a Hevo Data account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start

Hevo lists three things you need (Hevo Data):

• a smartphone,
• an authenticator app on it, and
• the Team Administrator or Team Collaborator role in Hevo.

If you usually sign in with Google, plan for the change. Hevo's 2FA page says social login isn't supported while 2FA is on for your account, so you'll sign in with your email address and password instead. If you've forgotten that password, reset it first (Hevo Data).

If your team signs in to Hevo through SAML single sign-on, and your identity provider (such as Okta) already asks for a second factor, Hevo suggests turning its own 2FA off so you aren't prompted twice (Hevo Data).

Turn on 2FA with an authenticator app

These steps follow Hevo's page as updated on October 12, 2026 (Hevo Data):

1. In the Navigation Bar, click the Settings icon.
2. In the Settings sidebar, under USER, click Two Factor Authentication.
3. On the Two Factor Authentication page, click Enable.
4. A dialog called SET UP TWO FACTOR AUTHENTICATION shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen.
5. Novaz now shows a code for Hevo. Type it into Hevo to confirm.
6. Hevo shows a set of recovery codes. Download them and keep them somewhere safe.

Hevo's help only describes the QR code. It doesn't mention a text key, or say how many digits its codes have or how often they change. Scanning is the better route anyway: the QR code passes those settings to Novaz. If you're signed in to Hevo on your iPhone, take a screenshot of the QR code, then tap + and Choose a photo in Novaz. See scanning a QR code on the same iPhone.

Your recovery codes

Recovery codes let you sign in when you don't have your phone: you type one in place of the authenticator code. You can view them again later and make new ones whenever you like (Hevo Data):

1. Click the Settings icon, then under USER, click Two Factor Authentication.
2. Under Recovery Code, click View Codes.
3. Click Copy or Download to save them.

Novaz keeps its keys on your iPhone unless you turn on iCloud backup or export a backup file, so save these codes too. Keep them in a password manager or on paper, away from the phone. More in 2FA backup codes.

Making 2FA required for your team

A Team Administrator or Team Collaborator can require 2FA for everyone on the team (Hevo Data):

1. Click the Settings icon, then under TEAM, click Authentication.
2. On the Authentication Settings page, select Require Password or Google Authentication.
3. Inside that option, turn on Enforce Two Factor Authentication.

Hevo doesn't switch it on for each person. Team members still set up their own authenticator app with the steps above, so let them know. Once 2FA is enforced, members can't turn it off for their own accounts.

If Hevo rejects your code

Hevo's documentation doesn't cover rejected codes. The most common cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Be careful with repeated attempts. Hevo locks an account for 30 minutes after 10 failed sign-in attempts in a row (Hevo Data). That page is about password guesses, and it doesn't say whether wrong 2FA codes count too.

Changing phones

Hevo doesn't describe moving 2FA to a new phone. With its documented steps, the route is to turn 2FA off while you still have the old phone, then turn it on again with the new one, which only works if your team doesn't enforce 2FA. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your recovery codes, then set up 2FA again on your new phone and save the new codes.

Without them, Hevo's documentation doesn't explain how to recover an account without them, what proof it asks for, or how long that takes. The support channel it documents is Live Chat, opened from the Navigation Bar inside the product, and it's not available on the Free plan (Hevo Data). See also Lost the phone with your authenticator app?

Turning 2FA off

Click the Settings icon, then under USER, click Two Factor Authentication, and click Disable next to Two Factor Authentication. You can't do this if your team owner has made 2FA required for the team (Hevo Data). Afterwards, remove Hevo from Novaz: open the account and tap Remove account.

Official Hevo Data help

• Enabling Two-Factor Authentication
• Enabling Password or Google-Based Authentication
• Enforcing SAML Single Sign On Across Your Team
• Password and Account Lockout Policy
• Resetting Your Password
• Hevo Support