Skip to content
Novaz AuthenticatorGET

IronVest 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. Signing in afterwards
  3. No backup codes, but a self-service reset
  4. If IronVest rejects your code
  5. Lost your phone or changing phones
  6. Turning 2FA off
  7. Official IronVest help

IronVest's consumer app, once called Blur, holds a lot in one place: masked email addresses, masked phone numbers, masked cards and a password manager. If you still sign in at the old Blur site, it's the same account and the same login (IronVest). Two-factor authentication (2FA) is optional. Once it's on, IronVest asks for a time-based code from an authenticator app after your password (IronVest). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the IronVest steps come from IronVest's own knowledge base, linked below, which we read on October 22, 2026. Most of its 2FA articles were last updated on November 4, 2025. We haven't tested them on an IronVest account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

One thing to know first: the ironvest.com home page now sells fraud prevention to banks. The consumer app lives at ironvest.com/app, which the site's Consumer link opens (IronVest).

Turn on 2FA with an authenticator app

IronVest's knowledge base describes the setup on the website (IronVest):

  1. Sign in at ironvest.com/app and open your Settings page (ironvest.com/app/settings).
  2. Click Account.
  3. Click Enable next to Two-Factor Authentication. IronVest shows a barcode (a QR code).
  4. In Novaz, tap +, then Scan QR code, and point the camera at the code on your screen. If you have the page open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
  5. Type the code Novaz shows into the IronVest page and click Submit.

The article only covers scanning the barcode. It doesn't mention a text key you could type instead. If IronVest offers one on that page, tap +, then Enter key manually in Novaz, and paste it as the Setup key. See What is a 2FA setup key?

The knowledge base gives no steps for turning this on from the mobile app, so use a computer.

Signing in afterwards

After you enter your email address and password and click Log In, IronVest asks for the 6-digit code from your app. Type it and click Verify (IronVest). The help pages don't mention trusted devices or a "remember me" option.

If you also have email authentication on, IronVest shows a field for the emailed code after your password. In the browser extension's popup that field may not appear. If it doesn't, sign in from the toolbar icon menu or the website (IronVest).

No backup codes, but a self-service reset

IronVest's help doesn't mention backup or recovery codes for 2FA. What it does describe is a reset you can start yourself (below), which depends on getting into your email. Keep that email account secure, because it's your way back in.

Don't confuse this with the Backup Passphrase. That's a set of 12 words from when you created the account. It protects your stored passwords and other data if you forget your IronVest password. It doesn't replace your authenticator (IronVest).

IronVest's Passcode Protection is a different thing as well. It catches text-message codes that other sites send to your masked phone number (IronVest). Your IronVest sign-in code comes from your authenticator app, not from there.

If IronVest rejects your code

IronVest says a rejected code is usually a clock problem, and that a phone clock more than 60 seconds off makes the code fail (IronVest). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you sooner, when your clock is 15 seconds or more off. More causes are in Authenticator code not working?

Lost your phone or changing phones

IronVest treats both the same way (IronVest):

  1. Sign in using email authentication instead of the app code.
  2. Go to your Settings page.
  3. Click Lost access to my TOTP app. Reset Two-Factor authentication.
  4. Follow the instructions IronVest emails you.

Then set up 2FA again on your new phone. If that doesn't work, email support@ironvest.com. IronVest says Support will ask you to confirm some details about the account before it turns 2FA off for you. It doesn't list which details or say how long it takes.

On a new phone, a Novaz iCloud backup or backup file brings the IronVest entry with you, so no reset is needed. Without one, you go through the IronVest reset and add the account again. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

Turning 2FA off

The knowledge base has no steps for turning 2FA off yourself. The routes it documents are the reset above and asking Support to disable it.

Official IronVest help

More guides: Security, identity and VPN