Hostek 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Hostek account is the billing control panel, or client area, at cp.hostek.com (cp.hostek.co.uk for UK and EU customers), where you pay invoices and manage your hosting. Two-factor authentication (2FA) isn't optional there anymore. Hostek's newest help page says its security policy requires a password plus a code from an authenticator app every time you sign in, and it names no other way to get the second code, such as text messages (Hostek).
This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Hostek steps come from Hostek's own help center and wiki, linked below, which we read on October 21, 2026. We haven't tested them on a Hostek account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Hostek updated its setup article on October 13, 2026. It describes these steps (Hostek):
- Sign in to the customer portal at cp.hostek.com, or cp.hostek.co.uk if you're a UK or EU customer, with your username and password.
- Hostek takes you straight to the Security Settings page. Near the bottom, in the 2FA section, click Enable Two-Factor Authentication.
- Hostek shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If you'd rather type it, Hostek also shows a key on the same screen. Its older help calls it the secret key. In Novaz, tap +, then Enter key manually, enter "Hostek" as the Service, your email as the Account if you like, and paste the key into Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz into the field in the portal and click Verify Code.
- Save the backup codes Hostek shows you (more on these below).
- Click Finish. If the portal doesn't take you to your account's home page, click the Hostek logo at the top of the window.
Hostek's codes are the usual kind: six digits that change every 30 seconds, according to its older wiki (Hostek). Typing the key by hand in Novaz gives you exactly that.
Older Hostek pages, last updated in 2017 and February 2025, describe a different screen. There you open the Hello drop-down, choose Security Settings, click Click here to enable, then Get Started, and confirm the code with Confirm (Hostek).
Keep the backup codes
The newest page says you get a set of backup codes once your app is verified. The older pages describe a single Backup Code, and the sign-in screen offers Login using Backup Code (Hostek). Store them away from your phone. Novaz's keys are only on your iPhone unless you've turned on iCloud backup or exported a backup file, so these codes are what gets you back in if the phone is lost without one. See 2FA backup codes.
When Hostek asks for a code
Every sign-in to the billing control panel asks for your password and then a code. Hostek's 2017 wiki also says that turning on 2FA adds the code to sign-ins at WCP, its own Windows hosting control panel at wcp.hostek.com (Hostek). The newer pages don't repeat that, so treat it as possibly out of date.
If several people used to share one login, Hostek's answer is to invite each of them as a separate user from Hello, Name! > User Management, so each person signs in with their own credentials (Hostek).
If Hostek rejects your code
Hostek's older guide only says to enter the code before it changes (Hostek). If a fresh code still fails, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
If you lose your authenticator
Sign in with a backup code, then set up an authenticator app again. Without your backup codes, Hostek says to contact its support team (Hostek). You can start a conversation with the chat button on hostek.com or by emailing support@hostek.com from the address on file. Hostek treats an email as verified only after two replies from that address (Hostek). Its account recovery page warns that when staff have to restore access by hand, it can take time and documents proving who you are or that you own the company on the account (Hostek). Hostek doesn't say how long it takes.
Hostek's pages don't describe moving 2FA to a new phone. With Novaz, you can restore your accounts on the new iPhone from iCloud backup or a backup file, and Hostek's codes keep working. Without a backup, the documented route back in is the backup code, after which Hostek says to set up an authenticator app again, so keep the old phone until the new one is working. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?
Can you turn it off?
No. Hostek says 2FA is mandatory and points you to support if you run into trouble (Hostek).
