Hover 2FA: how to set up an authenticator app

Your Hover account controls your domains, their DNS, your Hover email and billing, so anyone who gets in can redirect or move your domains. Hover already asks for a second step on every account and won't let you turn it off entirely (Hover). By default that step is an emailed code. An authenticator app replaces it and takes priority (Hover). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Hover steps come from Hover's own help center, linked below, which we read on October 19, 2026. We haven't tested them on a Hover account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Email codes or an app

Without an app, Hover emails a six-digit code to your primary and backup addresses (Hover), so anyone in your inbox can pass that step too. An authenticator app keeps the code on your phone. Hover asks for any app that makes time-based one-time passwords (TOTP), as Novaz does (Hover).

A 2021 Hover blog post also listed text messages (Hover), but the current help center doesn't describe SMS setup.

Turn on 2FA with an authenticator app

Hover's help describes these steps (Hover):

1. Sign in at hover.com/signin with your current second step, usually the email code.
2. Select Settings in the top navigation bar.
3. Turn on the two-step sign in toggle on the left. Another Hover page places it under Settings > Overview, so the layout may differ (Hover).
4. Select Use an app, then Next step.
5. Hover shows a QR code. In Novaz, tap +, then Scan QR code. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
6. If you can't scan it, Hover lets you enter the secret key by hand. In Novaz, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
7. Select Next step, type the six-digit code from Novaz, and select Enable two-step sign-in.
8. Hover shows your recovery code. Write it down, then select OK, I've written it down.

Hover doesn't say how often its codes change or how long the secret key is. Scanning the QR code is safer, because it passes those settings to the app. A key typed by hand gets 6 digits every 30 seconds.

One recovery code, not a list

Hover gives you a single sixteen-digit recovery code and calls it the only way back in if you lose your authenticator. Support can't turn off two-step sign in without extra verification (Hover). Save it even if you use Novaz's iCloud backup or a backup file, since a backup can be missing or out of date when you need it. Keep it in a password manager or on paper.

To get a new one, go to Settings, select Recovery code under Security, then Regenerate recovery code. The old code stops working at once. See 2FA backup codes.

When Hover asks for a code

• Every sign-in, after your username and password. Hover's help doesn't mention a way to remember a device.
• Magic token sign-in. Signing in with an emailed token instead of a password still asks for the app code (Hover).
• Support requests. To confirm it's you, support emails a four-digit PIN to your primary address and also asks for a code from your app (Hover).

If Hover rejects your code

Hover's help has no advice for rejected app codes. Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Don't keep guessing. Hover locks an account after several failed sign-in attempts (Hover). For email codes, it says more than five wrong entries trigger the lock, and that a password reset or support can unlock it (Hover).

Changing phones

Hover doesn't describe a phone move. Its help does say that turning the app off puts you back on email codes (Hover). So while you still have the old phone, turn the app off (below), then set it up again on the new phone and keep the new recovery code. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead and skip this. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Use your recovery code (Hover):

1. When Hover asks for your code at sign-in, select I can't use my authenticator app or I've lost my phone. Hover says the wording depends on how you first turned on two-step sign in.
2. Enter the recovery code and select Continue.

Using the recovery code turns off the app method, so you're back on email codes until you set the app up again.

Without the recovery code, contact Hover Support by live chat on hover.com, at help@hover.com, or by phone, 8 am to 8 pm Eastern (Hover). Support verifies you with a PIN sent to your primary email address, so you'll need that inbox. Hover doesn't say what extra proof it wants or how long it takes. More in Lost the phone with your authenticator app?

Turning the app off

Deleting the app from your phone doesn't turn this off. In Settings, slide the Two-step sign in toggle off, enter your account password, and select Disable two-step sign in (Hover). Hover goes back to email codes. Then remove Hover from Novaz: open it and tap Remove account.

Official Hover help

• Enabling Two-Step Sign In on Your Hover Account
• Accessing Your Account with Email-Based Two-Factor Authentication
• Hover Security Standards and Best Practices
• Magic Token Account Sign-In
• Verifying Your Identity With Hover Support
• Contacting Hover Customer Support
• Enable two-step sign in on your Hover account (Hover blog, October 2021)