Skip to content
Novaz AuthenticatorGET

J.P. Morgan Personal Investing 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. In the US? This guide isn't for chase.com
  2. Turn on 2FA with an authenticator app
  3. Your recovery code is the backup
  4. When J.P. Morgan asks for a code
  5. If J.P. Morgan rejects your code
  6. Changing phones or switching method
  7. If you lose your authenticator
  8. Turning 2FA off
  9. Official J.P. Morgan help

J.P. Morgan Personal Investing is the UK service for ISAs, pensions and general investment accounts that was called Nutmeg until November 2025 (J.P. Morgan). Two-step verification isn't optional there. Every client has to set it up, with either a text message or an authenticator app, and then type a 6-digit code at every sign-in, on the website and in the mobile app (J.P. Morgan). This guide covers the authenticator app, using Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the J.P. Morgan steps come from J.P. Morgan Personal Investing's own help center, including its screenshots, and from chase.com, all linked below, which we read on October 19, 2026. We haven't tested them on a J.P. Morgan account, so a label may differ slightly. The help center's screenshots still show the old Nutmeg name. The Novaz steps are checked against the app, version 1.0.5.

In the US? This guide isn't for chase.com

US J.P. Morgan Self-Directed Investing accounts live in the Chase Mobile app and at chase.com (Chase), so they use your Chase sign-in. Chase's security page offers one-time codes, passkeys and your phone's screen lock, and doesn't mention authenticator apps (Chase). There's nothing to add to Novaz there.

Turn on 2FA with an authenticator app

There's no setting to look for: if you haven't set up two-step verification yet, J.P. Morgan Personal Investing asks you to when you sign in (J.P. Morgan):

  1. Sign in with your email address and password, on a computer if you can, so Novaz can scan the QR code from its screen.
  2. Choose Verify using an authenticator app. The other option is Verify using a code from a text message (SMS).
  3. The Two-step verification screen shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it.
  4. On the same iPhone, tap Trouble scanning? to get the setup key (J.P. Morgan's help calls it "a code"). Copy it, then in Novaz tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key? Or screenshot the QR code and use Choose a photo: see scanning a QR code on the same iPhone.
  5. Type the 6-digit code from Novaz in Enter the 6-digit code and choose Continue.
  6. On the Almost there screen, save your recovery code (Copy code copies it), check I have safely recorded this code, and choose Continue.

J.P. Morgan doesn't say how often its codes change, but the sample QR code pictured in its help article uses standard settings, so typing the key should work as well as scanning.

Your recovery code is the backup

You get one recovery code at setup. J.P. Morgan says it's for signing in when you're without your phone (J.P. Morgan). Its help doesn't say where you type it, whether it works more than once, or how to get a new one. If you lose the phone and have no Novaz backup, this code is what gets you in. Store it in a password manager or on paper, away from the phone. See 2FA backup codes.

When J.P. Morgan asks for a code

Every time you log in, on the website or in the app, right after your password. The help doesn't mention a way to skip it on a trusted device.

If J.P. Morgan rejects your code

J.P. Morgan's troubleshooting article says that if you're sure the code is right, your device's time may be out of sync with its servers. Its fix is written for Android (J.P. Morgan). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones or switching method

J.P. Morgan doesn't describe a self-service way to move to a new phone. To change your verification method, its help says to contact the team (J.P. Morgan). So talk to Client Support before you wipe the old iPhone, and ask how to set up the new one. If you have a Novaz iCloud backup or backup file, restoring it on the new iPhone brings the J.P. Morgan entry with it, so the codes keep working. See How to transfer your authenticator app to a new iPhone.

Can't find the account in your app? If you set it up before the rename, look for Nutmeg: the sample QR code in J.P. Morgan's help still names nutmeg.com.

If you lose your authenticator

Try your recovery code first. Without it, J.P. Morgan's help says to contact the team if you've lost the device you set up two-step verification on, or can't use it (J.P. Morgan).

Client Support, based in London and Edinburgh, takes calls on 020 3598 1515 and live chat from 9am to 5:30pm Monday to Thursday and 9am to 4:30pm on Friday, except public holidays. The email address is support@personalinvesting.jpmorgan.com (J.P. Morgan). The help doesn't say what proof of identity Support asks for or how long a reset takes.

More in Lost the phone with your authenticator app?

Turning 2FA off

You can't. Two-step verification is required for every client. The only change the help describes is switching between text message and authenticator app, through Client Support.

Official J.P. Morgan help