MyLabcorp 2FA: how to set up an authenticator app

If you look up your Labcorp test results, book lab appointments or pay Labcorp bills online, you have a MyLabcorp account. Until recently it was called Labcorp Patient. Labcorp says the portal simply got a new name, and the new MyLabcorp mobile app uses the same login as the website (Labcorp, Labcorp). You'll still see both names on Labcorp's pages, and patient.labcorp.com is the site's address.

Labcorp calls its two-factor authentication multifactor authentication (MFA). It's optional. On top of your password you can add one or more extra "factors": Okta Verify, which is Okta's own app with push prompts, or Google Authenticator, which gives you a code that changes every 30 seconds (Labcorp). The extra step covers both the MyLabcorp app and the website.

Labcorp's help names Google Authenticator, but that option is the ordinary time-based kind of code. This guide uses Authenticator App - Novaz on iPhone for it. Any authenticator app works the same way.

How we checked this guide: the MyLabcorp steps come from Labcorp's own help center and its MyLabcorp page on labcorp.com, linked below, which we read on October 21, 2026. The help center builds its pages in your browser, so we read the article text from the page file that the help center itself publishes (archived copies hold only the empty page). We haven't tested the steps on a MyLabcorp account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Labcorp's setup article is short (Labcorp):

1. Sign in to your MyLabcorp account at patient.labcorp.com.
2. Under Profile & Security, select Turn on MFA. Labcorp's password article calls the same area Profile, then Login & Security, so the labels may differ on your screen (Labcorp).
3. From the list of security methods, choose Google Authenticator.
4. Follow the screens that come next. Labcorp doesn't describe them, so we can't tell you their exact labels.

Most setups like this show a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If you're setting this up in the MyLabcorp app on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.

If the screen offers a text key instead, tap +, then Enter key manually in Novaz. Type MyLabcorp as the Service, your email address as the Account if you like, and the key as the Setup key. See What is a 2FA setup key? Labcorp confirms the 30-second interval but doesn't say how many digits the Google Authenticator codes have, so scan the QR code when you can. It carries those settings to Novaz, while a typed key always gives 6-digit codes.

Then type the current Novaz code where Labcorp asks for it.

To add another factor later, such as Okta Verify, use Manage MFA under Profile & Security (Labcorp).

No backup codes

Labcorp's MFA articles don't mention backup or recovery codes. The only extra protection they describe is adding more than one factor. They don't explain how sign-in works once you have two, so we can't promise a second factor will get you in if the first is gone. And without a Novaz backup (iCloud backup or a backup file), its keys exist only on your iPhone.

Signing in

With MFA on, MyLabcorp asks for the extra step after your password when you sign in (Labcorp). Labcorp doesn't say whether it remembers trusted devices.

If MyLabcorp rejects your code

Labcorp's one tip: each code lasts 30 seconds, and if the window runs out you can enter the next code (Labcorp). If fresh codes still fail, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when your clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones or turning it off

Labcorp doesn't document moving the authenticator to a new phone. While you can still sign in, the safe order is to add the factor again with the new phone through Manage MFA, then remove the old one. With a Novaz iCloud backup or backup file, you can restore MyLabcorp on the new iPhone instead; without one, you set it up again there. See How to transfer your authenticator app to a new iPhone.

After you turn Google Authenticator off in your account, Labcorp says your app may keep showing codes, and tells you to delete the MyLabcorp entry from the app yourself (Labcorp). In Novaz, open MyLabcorp and tap Remove account. Labcorp doesn't name the button that turns the factor off.

If you lose your authenticator

Labcorp's help center has no article on a lost phone or a lost factor. If you added a second factor, try it first. Otherwise, contact Labcorp. Its Patient Inquiry form on labcorp.com is the general route for questions about the patient portal, and it tells you not to put passwords or health information in the message (Labcorp). Labcorp doesn't say what proof it asks for or how long a reset takes. More in Lost the phone with your authenticator app?

Official Labcorp help

• What is multifactor authentication (MFA) and how does it work?
• How do I set up a security method (factor) for multifactor authentication (MFA)?
• Why does the Google Authenticator app still show a verification code after I disabled Google Authenticator in my account?
• How do I change my password?
• Is the Labcorp Patient portal going away?
• MyLabcorp app
• Patient Inquiry Form