Jotform 2FA: how to set up an authenticator app

Jotform is the online form builder behind many contact forms, sign-up sheets and order forms. Its two-factor authentication (2FA) has one method: a time-based code from an authenticator app, typed after your password every time you log in (Jotform). The help pages mention no text-message codes and no trusted devices. On a regular account 2FA is optional. On Jotform Enterprise, your server admin decides. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Jotform steps come from Jotform's own help pages and blog, linked below. jotform.com refused our automated connection, so on October 20, 2026 we read the pages as archived copies on web.archive.org, saved between April and June 2026. We haven't tested the steps on a Jotform account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

One thing first: Jotform emails you a verification code before it lets you change security settings, so make sure you can open the inbox on your account. These steps follow Jotform's help article, last updated November 23, 2025 (Jotform):

1. On your Workspace page, click your Profile Picture/Avatar at the top right, then Settings.
2. Go to the Security tab and click Send Verification Code.
3. Enter the Verification Code from Jotform's email. If it isn't accepted on its own, fix it and click Verify.
4. Turn on the toggle for Two-Factor Authentication (2FA).
5. Enter your Jotform password and click Verify.
6. The Configure the Authenticator App window shows a QR code. In Novaz, tap +, then Scan QR code. If Jotform is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
7. Can't scan? The window also shows a Setup Key. In Novaz, tap +, then Enter key manually, type Jotform as the Service and paste the key into Setup key. See What is a 2FA setup key?
8. Type the code from Novaz into the boxes. If it isn't accepted on its own, correct it and click Enable 2FA.
9. Copy or download your recovery codes before you close the window.

A confirmation email follows. Jotform's pages say the codes are six digits but not how often they change (Jotform). Scanning the QR code is the safer choice: it passes the code settings to Novaz, while a typed key always gets 30 seconds.

Your nine recovery codes

Jotform gives you 9 recovery codes, and each one you use comes off the count in your security settings (Jotform). Its pages don't say how to get a new set. If you lose the phone without a Novaz backup, or your backup file is older than this account, these codes are how you get back in. Store them in a password manager or on paper, away from the phone. More in 2FA backup codes.

To use one, log in with your password, click See other methods, choose Use your recovery codes, type a code and click Verify.

On Jotform Enterprise

Enterprise servers have 2FA off by default (Jotform). You can only set it up after a server admin turns it on in the Admin Console, and the admin can also require it with Require two-factor authentication for all users (Jotform). When it's required, you can't turn it off. Admins can require it for single users too, and can reset 2FA for someone who has lost both the authenticator and the recovery codes (Jotform). On Enterprise, take a lockout to your admin first. These pages date from 2024, so the admin labels may have changed.

If Jotform rejects your code

Jotform's help only says to correct a mistyped code and try again. If codes that look right keep failing, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes in Authenticator code not working?

Changing phones

Jotform doesn't describe moving 2FA to a new phone, but its article on turning 2FA off names switching devices as a reason to do it (Jotform). While you still have the old iPhone, turn 2FA off, then turn it on again, scan the new QR code with Novaz on the new phone and save the new recovery codes. If you back up Novaz with iCloud backup or a backup file, you can restore your accounts on the new iPhone instead, and the current Jotform entry keeps working. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Use a recovery code first. With none left, Jotform's recovery runs through a support ticket (Jotform):

1. Log in with your Username/Email and Password.
2. Click See Other Methods, then I can’t access my authentication device.
3. Click Recover Your Account.
4. In the email Jotform sends, click Create Ticket.

You can't start this without your username or email and your password. Jotform says you'll confirm your identity through security checks, but doesn't list them or say how long recovery takes. More in Lost the phone with your authenticator app?

Turning 2FA off

Start as you did to turn it on: Settings, the Security tab, Send Verification Code and the emailed code. Then switch off Two-Factor Authentication (2FA), enter your password, click Verify and confirm with Yes, Disable 2FA. Jotform emails you when it's off (Jotform). In Novaz, open the account and tap Remove account.

Official Jotform help

• How to Enable Two-Factor Authentication (2FA)
• How to Login With the Recovery Codes (2FA)
• How to Recover Account if You Lose Access 2FA Device and Recovery Codes
• How to Disable Two-Factor Authentication (2FA)
• How to Enable and Set Up Two-Factor Authentication (2FA) in Jotform Enterprise
• Announcing two-factor authentication for Jotform Enterprise, Jotform blog