Hosting Ukraine 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Hosting Ukraine (Хостинг Україна, ukraine.com.ua) runs hosting, domains, VPS and mail through one control panel at adm.tools, shared with its international site Hosting.XYZ. Its two-step authentication (2FA) has email codes on for every account from the start, and you can add Telegram, an authenticator app (which Hosting Ukraine labels GAuth) or a passkey alongside them. At sign-in, any one of the methods you've enabled is enough (Hosting Ukraine). This guide uses Authenticator App - Novaz on iPhone for the app method, but any authenticator app works the same way.
How we checked this guide: the Hosting Ukraine steps come from Hosting Ukraine's own wiki, linked below, which we read on October 21, 2026. The Ukrainian wiki on ukraine.com.ua links to English versions of the same pages on hosting.xyz, and we quote the English labels. We haven't tested them on a Hosting Ukraine account, so a label may differ slightly, and the panel shows Ukrainian labels unless you switch its language at the top of the control panel (Hosting Ukraine). The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Enabling two-step authentication signs out every session except the one you're using (Hosting Ukraine).
- Open the Personal data section of the control panel and switch to the Security tab.
- In the Two-step authentication block, click Enable next to GAuth.
- Hosting Ukraine shows a QR code with the secret key printed below it. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If you can't scan, type the secret key: tap +, then Enter key manually, and enter it as the Setup key. See What is a 2FA setup key?
- Type the code Novaz shows and click Confirm.
The wiki names Google Authenticator as its example, but any authenticator app can scan the code.
Should you turn off the email method?
Email stays on as a 2FA method until you disable it, and the wiki says you can. While it's on, a code sent to your mailbox passes the check just as well as a code from Novaz (Hosting Ukraine). If your mailbox is the weaker link, consider disabling Email once the authenticator works. The mailbox still confirms risky operations such as domain or ownership transfers (Hosting Ukraine).
When Hosting Ukraine asks for a code
After your email and password, or after signing in with Facebook or Discord, the panel asks you to finish two-step authentication; choose the authenticator app and click Log in. It skips that step when your browser has kept your sign-in data (Hosting Ukraine).
Two sign-in routes don't ask at all: Google, because Hosting Ukraine leaves 2FA to Google's side, and a passkey set up for passwordless sign-in (Hosting Ukraine).
No backup codes, and a fallback with a cost
The wiki doesn't mention backup or recovery codes. Its fallback is a phone number on your account: a call, or an SMS after three minutes. Using it turns off two-step authentication entirely and unlinks every bank card saved on the account, so the wiki says to use it only when no other method works (Hosting Ukraine, Hosting Ukraine).
Novaz's keys stay on your iPhone unless you back them up with iCloud backup or a backup file, so a second method you control, such as Telegram or a passkey, is the safer backup.
If Hosting Ukraine rejects your code
The wiki says the time on the phone must match the server's time exactly. Its fix refers to a time-correction menu in Google Authenticator; Novaz has no such menu because it follows the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. More causes are in Authenticator code not working?
Each account allows 15 sign-ins per hour, so don't retry too fast (Hosting Ukraine).
Changing phones
Hosting Ukraine's way to put the app on another device is to disable GAuth and enable it again, then scan the new QR code. It recommends keeping 2FA on just one device you fully control (Hosting Ukraine). If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. Without one, do this while the old phone still works. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
First, try any other method you left on, such as Email or Telegram. Then there's the phone fallback, with the cost described above. If none of that works, request access restoration at auth.adm.tools/access/restore. Only the account owner can apply, and you choose one of these routes (Hosting Ukraine):
- BankID, for individuals and FOPs (sole proprietors).
- Vchasno or Paperless e-document services, signing the request with an electronic signature. This is the route for legal entities.
- Paper workflow, for individuals only: a printed and filled-in form, a passport scan, and photos of yourself holding the form and your open passport.
Most routes also ask for the numbers of the cards or bank accounts you've paid with. Review takes 1 to 3 business days. If approved, all 2FA methods are turned off, phone numbers and bank cards are removed, and the password is reset. More in Lost the phone with your authenticator app?
Turning 2FA off
In Personal data > Security, click Disable next to GAuth in the Two-step authentication block (Hosting Ukraine). Then, in Novaz, open the account and tap Remove account.
