Infomaniak 2FA: how to set up an authenticator app

Your Infomaniak account is the single login for the Infomaniak Manager, kSuite tools such as Mail and kDrive, and any hosting you run there. Its two-factor authentication, which Infomaniak's screens call two-step verification, offers four methods: the Infomaniak Authenticator app, which sends a yes-or-no prompt; any third-party OTP app; a YubiKey; and text messages, which Infomaniak only offers for Swiss, French, Belgian and German numbers (Infomaniak). It's optional unless your Organization makes it mandatory.

The setup screen puts Infomaniak's own app first. A regular authenticator sits one click further in, as OTP Application. This guide takes that route with Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Infomaniak steps come from Infomaniak's own FAQ pages and their screenshots, linked below, which we read on October 20, 2026. We haven't tested them on an Infomaniak account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Infomaniak's guide and its screenshots show this path (Infomaniak):

1. Sign in to the Infomaniak Manager and open My Profile, then Security. The page is titled Account security. The address manager.infomaniak.com/2fa leads to the same place.
2. On the Two-step verification card, select Activate now.
3. Under How do you wish to validate your connections?, leave the Configure button on the Infomaniak Authenticator card alone and select See more methods.
4. Choose OTP Application, then Add this method.
5. Follow the setup on screen. Infomaniak's guide stops here, so it doesn't say whether you get a QR code, a key or both.
6. For a QR code: in Novaz, tap +, then Scan QR code. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
7. For a key: tap +, then Enter key manually. Type "Infomaniak" in Service, your login email in Account, and the key in Setup key. See What is a 2FA setup key?
8. Finish the remaining steps Infomaniak shows. If it asks you to confirm with a code, type the current one from Novaz.

Infomaniak's sign-in screenshots show a six-digit OTP connection code field, which fits what Novaz produces from a typed key (Infomaniak). If a QR code is offered, scanning it is still the safer choice, because it carries the exact code settings.

Save the backup codes

Infomaniak offers a sheet of backup codes to download after each 2FA setup, and says they'll be the only way in if you lose access to your phone (Infomaniak). Its sign-in screenshots show a Backup code option that counts how many codes remain active. Keep them even if you back up Novaz with iCloud backup or a backup file: they're what gets you in if the phone is gone and that backup is missing or out of date. Infomaniak's pages don't say how to get a new set. More in 2FA backup codes.

More than one method

Once you have two or more methods, the Two-step verification page lets you choose which one sign-in offers first: select Set by default on the OTP Application card. The trash can on a card deletes that method, and only works while another one remains (Infomaniak).

With 2FA on, Infomaniak's own apps, such as Mail, kDrive and Euria, can also show a request to approve a sign-in from another device. You can ask for one of your other methods instead, such as a Novaz code (Infomaniak).

Signing in, syncing and Organization rules

After your password, Infomaniak asks for your default method. On the OTP screen you type the code and select VALIDATE. Choose another method lists your other options (Infomaniak). The pages don't say how long a browser stays signed in.

Calendar and contact sync over CalDAV or CardDAV needs an application password once 2FA is on. Email clients using IMAP, POP or SMTP keep working with their existing device passwords (Infomaniak).

An Organization administrator can require 2FA for every user. If you don't have it yet, your next action in the account brings up a prompt to add a method, and nothing else works until you do. Infomaniak's desktop and mobile apps stay usable without it (Infomaniak).

If Infomaniak rejects your code

Infomaniak's pages don't cover rejected OTP codes. First check that the sign-in page is asking for OTP Application and not another method. Then check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Infomaniak's new-phone advice is written for its own app, but the order suits any method: sign in with 2FA one last time, remove or switch the method, then set it up on the new device (Infomaniak). Do this while the old iPhone still works. If you restore your Novaz accounts on the new iPhone from iCloud backup or a backup file, the codes keep working and you can skip this. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Infomaniak support won't switch off 2FA on request, and there's no need to phone them (Infomaniak). Recovery starts on the sign-in page:

1. Go to manager.infomaniak.com and enter your username and your usual password.
2. On the code screen, select Choose another method. (The text of Infomaniak's guide calls this the alternative methods.)
3. Pick Backup code and type one, or use another method you set up, such as SMS.
4. With none of those, select Ask for help. This opens Verification of your identity, with Use our application (recommended) or Transmit manually.

The app is Infomaniak Check (kCheck). It asks for your mobile number and a confirmation code, location access, photos of your ID card or passport, and a selfie holding the ID. Infomaniak says these requests get priority, with an average answer in 2 hours during business hours, and that the data is deleted after 72 hours if the request isn't handled (Infomaniak). More in Lost the phone with your authenticator app?

Turning 2FA off

Sign in with 2FA, open the Two-step verification page and select Remove (the guide's text says Delete), then confirm with your password. If the button is grayed out, an Organization security setting probably requires 2FA. If you used SMS and live outside the four supported countries, you won't be able to add SMS back later (Infomaniak).

Official Infomaniak help

• Enable two-factor authentication (2FA) for Infomaniak account logins
• Disable two-factor authentication (2FA)
• Troubleshooting Infomaniak Authenticator
• Use Infomaniak Authenticator as your Infomaniak 2FA solution
• Use Infomaniak apps as a 2FA solution
• Force the activation of two-factor authentication (2FA) for users in the Organization
• Getting Started Guide: kCheck (Infomaniak Check)