Hostinger 2FA: how to set up an authenticator app

Your Hostinger account signs you in to Hostinger dashboard (formerly hPanel), where you manage hosting, domains, email and billing (Hostinger). Two-factor authentication (2FA) is optional, and Hostinger offers two methods: an authentication app or codes by email. Only one can be on at a time, and Hostinger calls the app the more secure one (Hostinger). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Hostinger steps come from Hostinger's own support articles, linked below, which we read on October 20, 2026. We haven't tested them on a Hostinger account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

If you already use email codes, turn 2FA off first (see below), then set it up again with the app. These steps come from Hostinger's 2FA article, updated October 16, 2026 (Hostinger):

1. Log in to Hostinger dashboard, click the profile icon, and choose Security.
2. On the Two-Factor Authentication Setup page, click Turn on next to Two-factor authentication.
3. Choose Authentication app and click Select.
4. Enter your Hostinger password and click Submit.
5. Enter the confirmation code Hostinger emails to your account address and click Confirm, then Continue.
6. In Novaz, tap +, then Scan QR code, and scan the QR code Hostinger shows. If it's on the same iPhone, take a screenshot and use Choose a photo (scanning a QR code on the same iPhone).
7. Can't scan it? Click Show code. In Novaz, tap +, then Enter key manually, add a Service name, and type the code as the Setup key (What is a 2FA setup key?).
8. Enter the code Novaz shows and click Verify.
9. Save your backup codes with Download or Print, then click Finish setup.

The setup page should now show Mobile authentication method as On. You can also reach it from Account information > Account settings > Manage two-factor authentication (Hostinger).

Hostinger doesn't give the code length or interval, so scan the QR code if you can. It passes those settings to Novaz, while a typed key always gets 6-digit codes every 30 seconds.

Save the backup codes before you click Finish

Hostinger shows the backup codes once. If you don't save them, the only way to get new ones is to turn 2FA off and set it up again (Hostinger). They're also your way back in if the iPhone is lost and you have no up-to-date Novaz backup. Keep them in a password manager or on paper, away from the phone. See 2FA backup codes.

Don't count on a recovery email (Account information > Account settings > Recovery email) instead. It gets codes for password resets and suspicious logins and can stand in for your inbox with email-based 2FA, but Hostinger says it doesn't help with app-based 2FA (Hostinger).

When Hostinger asks for a code

Hostinger asks for a code every time you log in (Hostinger), when you change your account email (Hostinger), and when you turn 2FA off. A separate switch on the setup page, new or shared device verification, adds an extra check when someone signs in from a different location (Hostinger).

If Hostinger rejects your code

Hostinger's help doesn't cover rejected app codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Hostinger doesn't describe a phone switch, but you can turn 2FA off and on whenever you like (Hostinger). Do it while you still have the old iPhone: turn 2FA off with a code from it, set it up again on the new phone, and save the new backup codes. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead; see How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Hostinger's pages describe using a backup code to turn 2FA off, but not at login. Without the app or a working code, use account recovery (Hostinger):

1. On the Hostinger login page, select Can't Access Your Account?, then Lost two-factor authentication.
2. Enter your account email and an alternative email address you can read, and click Start Account Recovery.
3. Click the Start Account Recovery link in the email Hostinger sends to the alternative address.
4. On the form, give a domain name on the account, upload proof of ownership, and click Submit.

Hostinger requires a payment receipt from your payment source, such as a bank statement showing the charge. Its own invoices and screenshots don't count. A government ID, a card photo showing only the first six and last four digits, or business registration papers can back it up. Hostinger says it replies to the alternative address within two business days. See also Lost the phone with your authenticator app?

Turning 2FA off

On the Two-Factor Authentication Setup page, click Turn off next to your active method. Choose whether to confirm with that method or a backup code, click Continue, enter the code and click Verify (Hostinger).

Your mailbox has its own 2FA

A Hostinger Email mailbox has separate 2FA in Webmail, under All Settings > Account > Add 2FA, with its own QR code and backup codes, so it needs its own entry in Novaz. The account owner can reset it from the mailbox's three-dots menu in Hostinger dashboard with Disable 2FA (Hostinger).

Official Hostinger help

• How to set up two-factor authentication on your Hostinger account
• How to recover your Hostinger account if you can't access your email
• How to set up a recovery email for your Hostinger account
• How to access Hostinger dashboard
• How to change your Hostinger account details
• How to change the email address of a Hostinger account
• How to set up two-factor authentication in Hostinger Webmail