Infura 2FA: how to set up an authenticator app

If you searched for two-factor authentication on a MetaMask wallet, there isn't any. MetaMask's help center says so in one line: "2FA is not available for MetaMask users." (MetaMask) The authenticator option belongs to the Infura account: the developer login for the dashboard at app.infura.io, where you manage API keys and your plan. Some older MetaMask help pages call it a MetaMask Developer account.

2FA is optional on Infura, and its pages describe one method: an authenticator app, plus a backup code. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Infura steps come from Infura's documentation and the developer section of MetaMask's help center (support.infura.io now leads there), linked below, which we read on October 20, 2026. We haven't tested them on an Infura account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Infura's documentation, last updated June 18, 2026, gives these steps (Infura):

1. Sign in to the Infura dashboard with your email and password.
2. Go to Settings, then Account. The older MetaMask article places Settings at the bottom of the sidebar and the option further down the page, in a section called 2-Factor Authentication (MetaMask).
3. Select Enable. A QR code and a backup code appear.
4. In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If the dashboard is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Type the six-digit code from Novaz. The older article calls this box Enter your token. Select Verify.
6. Save the backup code somewhere safe, then select Continue.

Neither page mentions a text key under the QR code or says how often codes change. Scanning hands those settings to Novaz.

The backup code is also your key

MetaMask's help for Infura users explains that you can type the backup code into an authenticator app as a time-based key, and the app will then produce working sign-in codes (MetaMask). So the backup code is the secret your codes are made from, not a single-use password. Two things follow:

• Guard it like your password. Together with your password, it gets someone past 2FA.
• It's your spare copy. If the phone is gone and you have no Novaz backup to restore, this code is what lets you rebuild the Infura entry.

To add it in Novaz, tap +, then Enter key manually, type Infura as the Service, and paste the backup code as the Setup key. Novaz needs a base32 key of at least 16 characters, and Infura doesn't say how long its code is. If Novaz won't take it, use the code on the sign-in screen instead (below). More in What is a 2FA setup key?

Infura suggests keeping it in a secure note in your password manager, or on paper (Infura). See also 2FA backup codes.

Signing in

With 2FA on, the dashboard asks for a code from your app every time you sign in, after your password (Infura, MetaMask). Neither page mentions remembering a trusted device.

This is separate from the API key secret, which Infura describes as a password sent with your API key on server requests (Infura).

If Infura rejects your code

Infura's pages don't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

If you lose your authenticator

Infura documents two routes (Infura):

1. You have the backup code. Sign in with your email and password, and on the 2FA screen select Backup Code.
2. You don't. On the same screen, select Recover your Account and open a support case. Infura support must first confirm the account is yours, and MetaMask's help says to write from the account's email address (MetaMask). Neither page lists the proof Infura asks for or how long it takes.

After either route, Infura turns 2FA off on the account. Sign in, go back to Settings > Account, set it up again, and save the backup code it shows you.

Once you're signed in, Help in the dashboard's left menu, then Support, is Infura's general ticket route (Infura). More in Lost the phone with your authenticator app?

Changing phones

Infura doesn't describe a phone switch, but its pages allow two ways:

• Start over. While the old phone still works, select Disable 2FA under Settings > Account, then Enable again and scan the QR code with Novaz on the new iPhone.
• Reuse the backup code. Add it to Novaz on the new iPhone with Enter key manually, as described above.

There's also a Novaz route: restore your accounts on the new iPhone from iCloud backup or a backup file. See How to transfer your authenticator app to a new iPhone.

Turning 2FA off

Go to Settings > Account and select Disable 2FA (Infura). Then open the Infura entry in Novaz and tap Remove account.

Official Infura help

• Set up two-factor authentication (Infura documentation)
• Submit a help ticket (Infura documentation)
• API key secret (Infura documentation)
• How to set up two-factor authentication (2FA) (MetaMask Help Center, developer section)
• I lost access to my two-factor authentication (2FA) (MetaMask Help Center, developer section)