ISL Online 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your ISL Online account signs you in to the web portal at islonline.com and to the remote support apps, such as ISL Light. ISL Online calls its two-factor authentication 2-Step Verification, and once it's on, every ISL Online product asks for a code when you sign in (ISL Online). The methods are an authenticator app, a text message, an email address and a passkey.
The thing to know before you start: ISL Online's help doesn't mention backup codes. Its own advice is to set up at least two methods, so a lost phone doesn't lock you out. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the ISL Online steps come from ISL Online's own help center, linked below, which we read on October 21, 2026. We haven't tested them on an ISL Online account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
ISL Online's help covers this in two articles (ISL Online, ISL Online):
- Sign in at www.islonline.com/login.
- Open the account drop-down and choose Security.
- Choose 2-Step Verification to turn it on.
- On the method screen, select Authenticator app. If you already have another method set up, this screen looks different.
- Type a name for the phone that has the authenticator app, so you can tell it apart later.
- ISL Online shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Click Next, type the code Novaz shows, and click Next again.
- Click Done.
ISL Online's help only describes scanning the QR code. It doesn't mention a text key you could type instead, or say how many digits its codes have or how often they change. The QR code carries those settings to your app.
Add a second method, since there are no backup codes
ISL Online strongly recommends turning on at least two methods in case your main device is lost or stolen. It lets you add several emails, several phone numbers and several authenticator apps, and any of them can stand in when the main one isn't available (ISL Online).
That matters most if you don't back up Novaz, because then its keys exist only on your iPhone. To add email, go back to 2-Step Verification, select Email, enter the address, click Next, type the code from the email, click Next, then Done (ISL Online).
When ISL Online asks for a code
You get a code prompt each time you sign in. In ISL Light, the prompt has a Don't ask again on this device option. ISL Online then trusts that device for 30 days, after which it asks again. The devices you've trusted appear under Security > Used devices in the web portal (ISL Online).
If your company manages your account, its administrator can make 2-Step Verification required, so you're asked to set it up at your next sign-in. The administrator can also remove the Don't ask again on this device option, which means a code every time (ISL Online).
If ISL Online rejects your code
ISL Online's help doesn't cover rejected codes. Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Because ISL Online accepts more than one authenticator app, the simplest way is to add your new iPhone as an extra Authenticator app method while the old phone still works, then sign in once with the new one. ISL Online's help doesn't describe removing a single method afterwards. With a Novaz iCloud backup or backup file, you can instead restore your accounts on the new iPhone; without one, each account has to be set up again there. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
- Another method: sign in with an email address, phone number, passkey or second authenticator app you added earlier.
- Company accounts: ask your administrator. In the domain administration's Users page, an administrator can select you and choose Reset 2FA. You then get an email with a button to set up a new method (ISL Online).
- Your own account with no other method: ISL Online's help doesn't describe a recovery process, what proof it asks for or how long it takes. Its contact page is the official way to reach the company.
More in Lost the phone with your authenticator app?
Turning 2FA off and back on
Go to Security > 2-Step Verification, click Turn Off, then Turn Off again to confirm. A checkbox, Delete my saved second step devices, decides what happens to your methods. Check it and they're deleted. Leave it unchecked and ISL Online keeps them (ISL Online).
If you kept them, Restore 2-step Verification Devices on the same screen brings them back: select the devices and click Restore, then Restore again. ISL Online warns to restore only methods you can still use (ISL Online).
