Luma 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Luma, at luma.com, is where hosts run event pages, guest lists, calendars and ticket payouts, and where guests register. Most people sign in without a password, with a code sent by email or text. Two-factor authentication (2FA) adds a 6-digit code from an authenticator app on top of that. It's the only second step Luma's 2FA uses, and Luma's help doesn't say it's required for any account (Luma). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Luma steps come from Luma Help, Luma's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a Luma account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
How 2FA fits with Luma's sign-in
You can sign in to Luma with an emailed code, a code sent by SMS, WhatsApp or Telegram, an optional password, Google or Apple, or a passkey (Luma). With 2FA on, every one of these except a passkey is followed by the authenticator code. You don't need to set a password first (Luma).
If your company enforces single sign-on, its identity provider applies its own MFA rules (Luma). Luma's 2FA page doesn't say whether Luma asks for its code on top of that.
Turn on 2FA with an authenticator app
The 2FA setting is web only: Luma's profile help says you can't set it up in the iPhone or Android app (Luma). On an iPhone, use Safari. The steps (Luma):
- Sign in at luma.com and open Settings.
- Find the Password & Security section.
- Next to Two-Factor Authentication, choose Enable 2FA. Luma's help text calls it Enable Two-Factor Authentication, but the screenshot on the same page shows Enable 2FA, so look for either.
- Luma shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If Luma is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Enter the 6-digit code from Novaz in Luma.
Luma's help only describes scanning. It doesn't say whether a key you can type is also shown. If one is, Novaz takes it under + > Enter key manually, as the Setup key (What is a 2FA setup key?). Scanning is still safer, because the QR code carries the code settings and Luma doesn't publish them.
No backup codes, so add a passkey
Luma's 2FA page mentions no backup or recovery codes. Its advice is to add a passkey as your way back in if the authenticator is lost (Luma). With Novaz, take that advice: unless you've made an iCloud backup or backup file, its keys stay only on your iPhone.
- On the web: Settings > Password & Security, then Add a passkey under Passkeys.
- In the iPhone app: on the Home tab, tap your profile photo to open Settings (on iOS 18 and earlier, the gear icon), then Account Settings > Passkeys > Add a passkey.
Luma says passkeys sync through the account or password manager tied to your device, such as iCloud or Google (Luma), so a synced passkey outlives the iPhone that holds Novaz. Add it early: for its first few days, a new passkey can't confirm sensitive actions, such as changing how you sign in (Luma).
When Luma asks for a code
- At sign-in, unless you use a passkey. Luma's apps keep you signed in until you sign out, and web sessions can last up to 400 days (Luma), so expect the code mainly on a new device or browser.
- Sensitive actions use a separate check. Exporting guest data, changing how you sign in or managing payouts brings up a Confirm Access prompt. The options Luma lists are a passkey or a code by SMS, WhatsApp, Telegram or email, not the authenticator app (Luma).
If Luma rejects your code
Luma Help has no advice on failing authenticator codes. If you signed in with an emailed or texted code, you'll get two different codes in a row, so check which one the screen wants. Then check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes in Authenticator code not working?
Changing phones
Luma's help doesn't cover moving 2FA to a new phone. If you have a Novaz iCloud backup or backup file, restore it on the new iPhone and Luma comes with it. Otherwise, while you still have the old phone, sign in on the web, turn 2FA off, and turn it on again with Novaz on the new iPhone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Luma's help gives this order (Luma):
- Sign in with a passkey, if you have one. It skips the authenticator step.
- Check your password manager, including shared vaults, if you stored the codes there rather than in Novaz.
- Email support@luma.com from the address on your Luma account. Luma reviews the request by hand to confirm the account is yours and warns that "we can’t restore access in every case" (Luma). It doesn't say what proof it wants or how long this takes.
Support also can't change the email or phone number on an account (Luma), so keep both current. See Lost the phone with your authenticator app?
Turning 2FA off
In Settings > Password & Security, turn 2FA off. Luma first confirms it's you with a passkey or a code sent to your email or phone (Luma). Then open the entry in Novaz and tap Remove account.
