KeyCDN 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
KeyCDN is a content delivery network run from Switzerland. Its dashboard is where you manage your zones, storage, API keys and billing, so a stolen login can do real damage to a website. Two-factor authentication (2FA) is optional, and the only kind KeyCDN documents is a code from an authenticator app on your phone. Its help doesn't mention text messages or backup codes (KeyCDN). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the KeyCDN steps come from KeyCDN's own support pages, linked below, which we read on October 21, 2026. KeyCDN's 2FA article is short and was last updated in February 2020. We haven't tested the steps on a KeyCDN account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
KeyCDN keeps the setting under your account's authentication options (KeyCDN):
- Log in to the KeyCDN dashboard.
- In the sidebar on the left, click Account, then Authentication.
- Under Two-factor authentication, click Enable.
- KeyCDN shows a QR code. In Novaz, tap +, then Scan QR code, and aim the camera at it. If the dashboard is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If you'd rather type it, KeyCDN also lets you add the two-factor authentication secret by hand. That secret is the text key. In Novaz, tap +, then Enter key manually, and paste it into Setup key. See What is a 2FA setup key?
- Type the auth code that Novaz shows, then click Enable.
KeyCDN's article doesn't say how many digits its codes have or how often they change. If you can, scan the QR code, since it passes those settings to your app. A key typed by hand gets 6 digits every 30 seconds.
Signing in afterwards
From your next login on, KeyCDN wants the code along with your username and password (KeyCDN). All three go on the same form: the dashboard login page has a third box labeled auth code (if enabled) under the password. Open Novaz before you submit the form so the code is ready.
KeyCDN's help doesn't mention remembered devices or extra prompts for sensitive actions.
No backup codes are documented
KeyCDN's article lists no backup or recovery codes. If that phone is lost or wiped and you haven't backed up Novaz (iCloud backup or a backup file), there's nothing in the app to fall back on.
One option is to save a copy of the secret in a password manager while you're setting it up. Anyone with that secret can make your codes, so guard it like your password. More on this in 2FA backup codes.
If KeyCDN rejects your code
KeyCDN doesn't give any advice for this. Codes depend on the time, so first check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are covered in Authenticator code not working?
If you also use Access Rules, KeyCDN lets only the IP addresses or networks you've listed into the account (KeyCDN). A blocked login from a new network is a different problem from a wrong code.
Changing phones
The Authentication page where you turned 2FA on also lets you generate a new secret (KeyCDN). Do it while you can still sign in with the old phone. Add the new secret to Novaz on the new iPhone, then log out and back in to test it before you wipe the old phone. With a Novaz iCloud backup or backup file, you can restore the KeyCDN entry on the new iPhone instead and keep the current secret. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
KeyCDN's help doesn't describe a recovery process for a lost authenticator, what proof it asks for, or how long it takes. Its contact page asks existing customers to open a support request, and also has a general contact form. Without a backup of the secret, that's the only route we found. See Lost the phone with your authenticator app?
Turning 2FA off
On the same Authentication page, remove the current secret. KeyCDN notes that removing it turns two-factor authentication off (KeyCDN). Then remove the KeyCDN entry from Novaz: open it and tap Remove account.
