Hostens 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Hostens is a web hosting company: shared hosting, VPS servers and domains, managed from its Client Area at billing.hostens.com. Unlike many hosts, Hostens doesn't leave two-factor authentication (2FA) up to you. It says it has switched 2FA on for every client, new and existing, and asks you to set up a method the next time you sign in (Hostens).
You get two choices: an authenticator app, which Hostens labels Google Authenticator, or one-time codes by email, labeled Email MFA. Despite the label, the first option isn't tied to Google's app. Hostens says it uses standard time-based one-time passwords (TOTP), so any authenticator app works. This guide uses Authenticator App - Novaz on iPhone. Hostens's setup screen suggests a few other apps by name, but Novaz works the same way.
How we checked this guide: the Hostens steps come from Hostens's own help center, including the screenshots in its articles, which we read on October 21, 2026. We haven't tested them on a Hostens account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Hostens's help article describes the setup as part of signing in (Hostens):
- Sign in to the Hostens Client Area with your email address and password.
- On the Multi-factor auth screen, you'll see a note that it isn't configured yet and a list of methods. Choose Activate next to Google Authenticator.
- Hostens shows a QR code with a text key underneath it, which its article calls the token. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the Client Area is open on the same iPhone, take a screenshot, tap + and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If you'd rather type the key, tap +, then Enter key manually in Novaz. Fill in Service (for example, Hostens), Account if you like, and paste the key as the Setup key. See What is a 2FA setup key?
- Choose Continue. Hostens then asks for the 6-digit code Novaz shows. Type it in One-time code and choose Submit.
The setup screen also has a Generate new code link next to Continue. Hostens's help doesn't explain what it does. If you use it and Hostens shows a new QR code, scan that one, then open the old Hostens entry in Novaz and tap Remove account so you don't mix them up.
Hostens's pages don't say how many digits its codes have or how often they change. Scanning the QR code is the safer route, because the code carries those settings into your app. A key typed by hand always gives 6-digit codes every 30 seconds.
Where else the setting lives
A second Hostens article, "How to enhance account security?", places 2FA in your account settings under the Details section and treats it as something you switch on (Hostens). That's the place to check later. The two articles don't show the same screens, so the labels there may differ.
Authenticator app or email codes?
Email MFA sends a code to your inbox: you choose Send one-time code via Email and type the code you receive (Hostens). It's easier to set up, but anyone who gets into your mailbox also gets your second step. For a hosting account that controls your sites and domains, the app is the stronger choice. More in Authenticator app vs SMS codes.
Hostens's help doesn't say whether the email option stays available as a fallback once you've picked the authenticator app.
No backup codes mentioned
Hostens's help pages don't mention backup or recovery codes, and don't describe a way to move the authenticator to a new phone yourself. With Novaz, an iCloud backup or a backup file lets you restore your accounts on a new iPhone. Without one, the keys exist only on your current iPhone, so keep it until the new one is set up, and know how to reach Hostens support. See How to transfer your authenticator app to a new iPhone.
If Hostens rejects your code
Hostens doesn't publish advice for rejected codes. Most of the time, the iPhone's clock is off. Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. If you used Generate new code during setup, make sure Novaz has the latest key. Other causes are in Authenticator code not working?
If you lose your authenticator
The only route Hostens documents is its support team. For any 2FA question or problem during setup, the article points you to Live Chat or to sales@hostens.com (Hostens). It doesn't say what proof of ownership support asks for, or how long a reset takes.
Password recovery is separate. Hostens's Forgot password? flow can send a new password by email or by SMS (Hostens), but its help doesn't say that this resets your authenticator. More in Lost the phone with your authenticator app?
Turning 2FA off
Hostens has made 2FA mandatory for all clients, and its help doesn't describe a way to turn it off or to switch from the authenticator app to email codes. Ask support if you need to change methods.
