Humble Bundle 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Humble Bundle account holds the game keys, ebooks and downloads you've bought from bundles, the Humble Store and Humble Choice. Humble calls its two-factor authentication (2FA) Two-Step Verification, and an authenticator app is now the only kind: its help says it has moved away from text-message codes (Humble Bundle). Humble's pages name Google Authenticator throughout, but the setup window just asks for an authenticator app. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Humble Bundle steps come from Humble Bundle's own help center, including the screenshots in its articles, which we read on October 20, 2026. We haven't tested them on a Humble Bundle account, so a label may differ slightly. Humble last edited its two-step article in July 2023, so the screens may have changed since. The Novaz steps are checked against the app, version 1.0.5.
It replaces the emailed browser codes
Every Humble account has Browser Verification, also called Humble Guard: when you use a new browser to sign in, redeem a key or change account details, Humble may email you a code first. You can't switch it off, and Humble's rule is "You must use either Browser Verification or 2-Step Verification" (Humble Bundle). Turning on the authenticator app takes the place of those emailed codes (Humble Bundle).
Do you need it?
- Developers and publishers: yes, if you use Humble's self-service tools for the Humble Widget, Humble Store or Gamepage. Humble says you need Two-Step Verification to reach them (Humble Bundle).
- Everyone else: it's optional, though Humble recommends it in its security tips and after a hacked account (Humble Bundle, Humble Bundle).
Turn on 2FA with an authenticator app
Humble's help describes these steps (Humble Bundle):
- Sign in at humblebundle.com and open your Account Settings page.
- Scroll down near the bottom to the Two-Step Verification section and click Google Authenticator. You don't need Google's app.
- Enter your password if Humble asks.
- A window called Confirm Two-Step Verification shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. Humble says your Humble email fills in as the account name. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- If you can't scan it, use the key shown under the QR code. In Novaz, tap +, then Enter key manually. Type Humble Bundle as the Service, your Humble email as the Account, and the key as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz in Enter the six digit code displayed by your app, then click Confirm.
Humble's help doesn't say how often its codes change or how long the key is. Scanning is safer, because the QR code passes the code settings to your app, while a typed key always gets 6 digits every 30 seconds.
Signing in afterwards
After your email address and password, Humble shows a screen called Verify Account with a box labeled Enter Google Authenticator code. Type the current code from Novaz there and click VERIFY.
There are no backup codes
Humble's help doesn't mention backup codes, recovery codes or a second method. If you lose the app, your way back in is Humble Support (below). Novaz's iCloud backup or a backup file can bring your codes back on a new iPhone, but without one the keys exist only on your phone. Keep access to your account's email address and your Humble payment receipts: support will need them.
If Humble rejects your code
Humble calls this an invalid token error and usually blames the phone's clock. For iPhones, it says the clock must follow network time (Humble Bundle). Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Humble doesn't describe a phone switch. Using what it does document, turn Two-Step Verification off in Account Settings while you still have the old phone, then set it up again on the new one. Deleting Humble from your authenticator app doesn't turn anything off on Humble's side (Humble Bundle). If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Write to Humble Support. Include a transaction ID or order ID from one of your purchases. If you once used text-message codes, you can add the old phone number, but it's no longer required (Humble Bundle).
Write from your account's email address if you can; from another address, Humble asks for two or more transaction IDs (Humble Bundle). Transaction IDs are in your PayPal, card or Amazon payment receipts, not on bank statements (Humble Bundle). Humble doesn't say how long a reset takes.
More in Lost the phone with your authenticator app?
Turning 2FA off
Go back to your Account Settings page, scroll to the bottom, and remove Two-Step Verification in the section where you set it up (Humble Bundle). Since every account uses one check or the other, expect the emailed browser codes to come back. Developers using the self-service tools need it on.
