Hostpoint 2FA: how to set up an authenticator app for your Hostpoint ID
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Hostpoint ID is what you sign in with at the Hostpoint Control Panel, where you manage your web hosting, domains and DNS, contracts, invoices and payment methods (Hostpoint). Two-factor authentication (2FA) is optional and free, and Hostpoint strongly recommends it (Hostpoint, Hostpoint). The second factor is a code from an authenticator app. There are no backup codes. Instead, Hostpoint falls back on your phone number and your postal address, and both fallbacks switch 2FA off. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Hostpoint steps come from Hostpoint's own Support Center, including its screenshots, and a German-language post on Hostpoint's blog, all linked below, which we read on October 20, 2026. We haven't tested them on a Hostpoint account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Hostpoint says you need your smartphone and your phone number for this (Hostpoint):
- Sign in to the Hostpoint Control Panel with your Hostpoint ID.
- Click Admin in the menu at the top.
- In the menu on the left, click Hostpoint ID, then Password & security.
- Under Two-factor authentication, click Activate now. Hostpoint then guides you through the setup one step at a time.
Hostpoint's help doesn't show the screens that follow, so it doesn't say whether you'll get a QR code, a key to type, or both. With Novaz:
- QR code: tap +, then Scan QR code. If the Control Panel is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Text key: tap +, then Enter key manually. Type Hostpoint under Service and paste the key into Setup key. See What is a 2FA setup key?
Hostpoint's codes are six digits (Hostpoint), which matches what Novaz makes from a typed key. Hostpoint doesn't give the interval, though, so scan the QR code if one is offered. If the setup asks for a code to confirm, type the current one from Novaz.
While you're in the Control Panel, check that your mobile number and billing address are current. They're your only way back in if the authenticator is gone.
An older Hostpoint blog post, from March 2025, describes a different route to the setting, so the page may not match these steps exactly.
Signing in afterwards
From your next sign-in on, the Control Panel asks for your password and then the six-digit code from the app. A screenshot in Hostpoint's help shows the code screen with Enter verification code and a Trust this browser box (Hostpoint). Hostpoint doesn't explain how long a trusted browser skips the code.
Separately, Hostpoint's blog says a sign-in from an unknown device triggers an email with its own verification code (Hostpoint). That code arrives by email, not in Novaz.
If Hostpoint rejects your code
Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Hostpoint's own answer is a one-time SMS code (Hostpoint):
- Enter your Hostpoint ID and password and click Login.
- On the code screen, click I'm having problems logging in.
- Choose I can't generate a code with the authenticator app.
- Click Request SMS code. Hostpoint texts a code to the number saved in the Control Panel.
- Type that code and click Login.
The catch: Hostpoint warns that 2FA "will be deactivated after you have logged in successfully" (Hostpoint). To keep using it, set it up again with the steps above. If Novaz still holds the old Hostpoint entry, remove it once the new one works: open it and tap Remove account.
Changing phones
Hostpoint offers two routes: move the codes with your authenticator app's own transfer feature, or set up 2FA again for the new phone (Hostpoint). With Novaz, the first route is iCloud backup or a backup file, which you restore on the new iPhone. Without one, it's the second route, done while the old phone still works. If neither phone gets you in, Hostpoint points you to the SMS code above, which turns 2FA off so you can start fresh. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
If your phone number hasn't changed, use the SMS code above. If you've lost that phone too, or changed your number, Hostpoint sends a deactivation code by post (Hostpoint, Hostpoint):
- Sign in with your Hostpoint ID and password to reach the code screen.
- Click I'm having problems logging in.
- Choose I don't have my mobile phone with me or have lost it, or I have a new phone number.
- Click Request code via mail. The letter goes to the billing address saved in the Control Panel.
When it arrives, sign in again, click I'm having problems logging in, choose I received a deactivation code by mail, type the code and click Continue (Hostpoint). 2FA is then off, and your password alone gets you in. You can set it up again whenever you like.
These labels follow Hostpoint's screenshots; the article text words some of them slightly differently. Hostpoint doesn't say how long the letter takes or describe any other recovery route. For questions, the blog post lists free support at 0844 040404 and support@hostpoint.ch (Hostpoint). More in Lost the phone with your authenticator app?
Turning 2FA off
Hostpoint's help describes no off switch in the Control Panel. The SMS sign-in and the mailed deactivation code above are the only documented ways.
Official Hostpoint help
- What is two-factor authentication?
- How do I activate two-factor authentication?
- What do I do if my code is not accepted?
- I don't have my smartphone on me, what do I do now?
- I have changed my phone number and am no longer able to log in, what do I do now?
- I received a deactivation code by mail, what do I do now?
- I've got a new smartphone, what do I do now?
- Is there a fee for two-factor authentication?
- What is a Hostpoint ID?
- Mehr Sicherheit mit Zwei-Faktor-Authentifizierung (blog post, in German)