Akamai Cloud (Linode) 2FA: how to set up an authenticator app

Linode is now Akamai Cloud, but you still sign in to Cloud Manager at cloud.linode.com, and that's where two-factor authentication (2FA) is set up (Akamai). Two things set it apart: you need three security questions before you can turn it on, and you get one scratch code, not a list. The second factor is a code from an authenticator app. There's no text-message 2FA, since a verified phone number only proves who you are to Support, and security keys aren't supported yet (Akamai, Akamai).

2FA is optional unless an admin on your account requires it. This guide uses Authenticator App - Novaz on iPhone; any authenticator app works the same way.

How we checked this guide: the Akamai Cloud steps come from Akamai's own Cloud Manager documentation, linked below, which we read on October 20, 2026. Akamai's sign-in support form blocks automated access, so we read it in an archived copy from June 17, 2026. We haven't tested the steps on an Akamai Cloud account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start

Your login method must be Cloud Manager. If you sign in with Google or GitHub, 2FA is handled by that provider, and switching to one later turns off your Cloud Manager password and 2FA (Akamai).

You need three security questions. Support uses them to confirm it's you if you lose your phone and scratch code (Akamai). Set them on Login & Authentication (under your username at the top right), in Security Settings > Security Questions: fill in Question 1, Question 2 and Question 3, then click Add Security Questions.

Turn on 2FA with an authenticator app

1. Log in to Cloud Manager, click your username at the top right and select Login & Authentication (Akamai).
2. Check that Login Method is set to Cloud Manager and your security questions are in place.
3. In the Two-Factor Authentication section, click the toggle. Cloud Manager shows a QR code, a secret key and a Token field.
4. In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If it's on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
5. If scanning doesn't work, tap +, then Enter key manually. Fill in Service and Account, and type the secret key as the Setup key. Akamai's codes refresh every 30 seconds, which is what Novaz uses for a typed key. See What is a 2FA setup key?
6. Type the current code from Novaz into Token and click Confirm Token.
7. Cloud Manager shows a scratch code. Save it before you leave the page.

Save the scratch code

You get one scratch code. It works once in place of a token, and using it makes Cloud Manager show a replacement to save (Akamai). You can't make a new one on demand: if you've lost it, Akamai's answer is to turn 2FA off and set it up again.

Akamai says to keep it apart from your authenticator app (Akamai): unless you've backed up Novaz with iCloud backup or a backup file, its keys exist only on your iPhone, so the scratch code is your way in without Support. See 2FA backup codes.

Signing in, and when admins require 2FA

Each login asks for a code after your password: type it in Token and click Verify. Ticking Trust this device for 30 days keeps you signed in on that device for 30 days (Akamai). Signing in through Akamai Control Center skips Cloud Manager's 2FA, so give your Control Center account 2FA too (Akamai).

If an admin requires 2FA for you (under Administration > Identity & Access > Settings > Manage 2FA Enforcement), you get an email, can't log in until it's set up, and can't turn it off yourself (Akamai, Akamai).

If Cloud Manager rejects your code

Akamai blames the device's clock, which should be within 30 seconds of the real time (Akamai). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. If the time is right, Akamai points to its recovery procedure, below. See also Authenticator code not working?

Changing phones

Do this before you give up the old phone. On Login & Authentication, in the Two-Factor Authentication (2FA) section, click Reset two-factor authentication. Add the new QR code or secret key to Novaz on the new iPhone and confirm a token as in the setup (Akamai). If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead of resetting. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Akamai's recovery procedure has three routes (Akamai):

1. Scratch code. Enter it instead of a token. Then turn 2FA off and set it up again on your new phone.
2. Security questions. Call Support at 855-454-6633 (U.S. toll-free) or +1-609-380-7100, ask for 2FA to be removed, and give your username or email and your security answers. Akamai takes the answers only by phone.
3. No security questions. Use the Can't sign in to your account? form and choose I've lost my 2FA device. Akamai says this route will soon be retired. The archived form asked for details such as your username, account email, phone number and the last 6 digits of your payment card.

Without any of these, the form warns you "may be unable to regain access to your account" (Akamai). Neither page says how long a review takes. See Lost the phone with your authenticator app?

Turning 2FA off

On Login & Authentication, in the Two-Factor Authentication (2FA) section, switch off the Enabled toggle and click Disable Two-Factor Authentication to confirm (Akamai). You can't do this while an admin requires 2FA. Then open the entry in Novaz and tap Remove account.

Official Akamai Cloud help

• Manage 2FA on a user account
• Security controls for user accounts
• Enable third-party authentication on your user account
• Two-factor authentication (2FA) for Akamai Cloud
• Make two-factor authentication (2FA) optional
• Profile FAQ
• Can't sign in to your account? (read in an archived copy)