HostUS 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
HostUS sells VPS hosting, domains and licenses, and your HostUS account is the client area at my.hostus.us where you order, pay and open support tickets (HostUS, HostUS). Anyone who gets into that account can see your services and billing, so a second sign-in step is worth adding. HostUS doesn't make it mandatory. Its help page encourages it and says the system is time-based, so it "will work with any TOTP / OAUTH software" (HostUS). No other method, such as text messages, is described.
This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the HostUS steps come from HostUS's own knowledgebase, linked below, which we read on October 24, 2026. It has one short article on two-factor authentication. We haven't tested the steps on a HostUS account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
HostUS puts the setting in the menu that greets you by name in the client area (HostUS):
- Sign in to your HostUS account at my.hostus.us.
- Open the Hello, (name)! menu, where your own name takes the place of "(name)".
- Choose Security Settings.
- Under Two-Factor Authentication, choose the option to turn it on. HostUS's article doesn't name the button.
- Follow the prompts until HostUS shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If you're on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Finish the remaining on-screen prompts. If HostUS asks for a code, type the current one from Novaz.
- Sign out, then sign in again. HostUS lists this as the last step, so you can see that the code is now asked for.
The article only talks about scanning. It doesn't mention a text key you can type instead. If the setup screen does show one, tap +, then Enter key manually in Novaz, and type it as the Setup key.
Backup codes
HostUS's article doesn't say whether you get a backup or recovery code during setup. Read every screen in the setup flow before you close it. If HostUS shows a code, save it in a password manager or on paper, away from your phone. Unless you've backed up Novaz with iCloud backup or a backup file, its keys are only on that iPhone, so a saved code would be your only way in without it.
If HostUS rejects your code
HostUS gives no troubleshooting advice of its own. The usual cause is the iPhone's clock. Go to Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
If you lose your authenticator
HostUS's knowledgebase has no recovery steps for a lost phone, and it doesn't say what proof it would ask for. Without a code you can't reach the ticket system inside the client area, but the Contact Us link on my.hostus.us opens a ticket form that asks for your email address, with departments such as Sales / Billing and Technical Support (HostUS). Write from the email address on your account and explain that you've lost your authenticator. HostUS doesn't say how long this takes.
General steps for a lost phone are in Lost the phone with your authenticator app?
Changing phones
HostUS doesn't describe moving 2FA to a new phone. If you have a Novaz iCloud backup or backup file, restore it on the new iPhone and HostUS's codes keep working. Without one, keep the old phone working until HostUS is set up on the new one. While you can still sign in with a code, go back to Security Settings and look under Two-Factor Authentication for a way to turn it off and on again with the new phone. If you can't find one, ask HostUS through a support ticket before you wipe the old phone. See How to transfer your authenticator app to a new iPhone.
Turning 2FA off
The article doesn't cover turning two-factor authentication off. The Two-Factor Authentication section of Security Settings is where you turned it on, so that's the place to look. Once HostUS no longer asks for a code, open the HostUS entry in Novaz and tap Remove account.