HiDrive 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
STRATO HiDrive is the cloud storage from the German host STRATO, used in the browser at my.hidrive.com, in the HiDrive apps and over protocols such as WebDAV, SFTP and rsync. Two-factor authentication (2FA) is optional, and once on, it covers every login, protocols included (STRATO). The only second factor STRATO describes is a code from an authenticator app (STRATO). Plan for the protocol part: a backup job or NAS that signs in on its own will need changes.
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the HiDrive steps come from STRATO's own help pages in German and Dutch and its English HiDrive page, linked below, which we read on October 19, 2026. We haven't tested them on a HiDrive account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start
- Confirm your email address. HiDrive won't turn on 2FA until the email address on your HiDrive user is confirmed, so that you can still reach your storage in an emergency. Until then, the setting shows deaktiviert (off) and asks for one (STRATO).
- Know which login this is. This is 2FA for your HiDrive user. The STRATO customer login, for your contract, has its own separate setting (STRATO).
- Check your protocol logins. If anything signs in without you, such as rsync backups, read the protocol section below first.
STRATO's HiDrive 2FA page isn't on its English site, so the labels below are German, with a translation in parentheses. Expect them in your HiDrive's language.
Turn on 2FA with an authenticator app
STRATO's FAQ puts the setting at HiDrive-Login > Einstellungen (Settings) > Konto (Account) (STRATO):
- Sign in at my.hidrive.com as the user you want to protect.
- Open Einstellungen, then Konto.
- Find Zwei-Faktor-Authentifizierung (two-factor authentication). STRATO's screenshot shows it as deaktiviert with a pencil button on the right, the row's only control. Turn it on there.
- HiDrive shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If HiDrive is open on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- To type the key instead, use the Secret shown beside the QR code. In Novaz, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz into the field and click Code verifizieren (verify code).
- HiDrive confirms the setup. Click Abschließen (finish).
STRATO's Dutch page shows the whole setup window. Beside the QR code it lists TOTP (timebased), SHA1, 6 digits and a 30-second period (STRATO). Novaz uses those settings for a typed key, so either way should work. If Novaz won't accept the typed key, scan the QR code.
Using WebDAV, SFTP, rsync or a NAS
With 2FA on, protocol logins need the current code too. Add it to the end of your password after a colon, as in yourpassword:123456. A code stored like this expires after 60 minutes of inactivity (STRATO), so it won't carry an unattended job.
For regular rsync-style backups, STRATO recommends a separate HiDrive user with 2FA left off. If your package has only one user, you can order more (STRATO). For SFTP, STRATO's server guide describes another way: upload an SSH public key under Einstellungen, and connections with that key need no password, even with 2FA on (STRATO).
When HiDrive asks for a code
The screen at the end of setup says HiDrive will ask for a code at every login (STRATO). STRATO's 2FA page doesn't say how the HiDrive apps and desktop software handle it.
If HiDrive rejects your code
STRATO's help doesn't cover rejected codes. Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. For a protocol login, check the colon, and use a fresh code if the connection has been idle for 60 minutes. Other causes are in Authenticator code not working?
If you lose your authenticator
STRATO's HiDrive pages don't mention backup or recovery codes. If you turned on Novaz's iCloud backup or saved a backup file, restore it on your new iPhone and the codes come back. Without one, the keys were only on the lost phone, so you'll have to go through STRATO.
STRATO says the confirmed email address keeps you able to get in, but doesn't describe the steps, the proof it asks for or how long it takes. That leaves customer service. On the German site the hotline is 030 / 300 146 0, and STRATO identifies you by your customer number and Service-PIN, shown at the top right of the customer login. There is also a contact form (STRATO). Keep your email address current and your customer login working.
More in Lost the phone with your authenticator app?
Changing phones or turning 2FA off
STRATO's pages describe neither. The setting is in Einstellungen > Konto, so look there, and ask customer service if you can't change it. If you have a Novaz iCloud backup or backup file, restore it on the new iPhone and HiDrive's codes carry over. Without one, keep the old phone until HiDrive works with the new one. See How to transfer your authenticator app to a new iPhone.
Official STRATO help
- 2-Faktor-Authentifizierung im HiDrive einrichten (German)
- Twee-factor authenticatie instellen in HiDrive (Dutch)
- Online storage HiDrive basic - Your online backup
- HiDrive auf einem Server einrichten (German)
- Zwei-Faktor-Authentifizierung für den Login (German, STRATO customer login)