Luno 2FA: how to set up an authenticator app

Your Luno account holds your cryptocurrency, and Luno warns that crypto stolen with your sign-in details can't be recovered. It urges everyone to turn on two-factor authentication (2FA), though signing in doesn't require it (Luno). If your account is verified in Malaysia, South Africa or Nigeria, you need 2FA or a passkey to turn on crypto sends and to send (Luno).

Luno's 2FA uses an authenticator app, such as Google Authenticator or Authy (Luno). Two things are unusual: the Luno app gives you a key to copy, not a QR code, and its help mentions no backup codes, so a saved copy of that key is your way back in. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Luno steps come from Luno's own help center, linked below, which we read on October 19, 2026. We haven't tested them on a Luno account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA in the Luno app

Use one device for the whole setup, or keep both devices on the same router with any VPN off (Luno).

1. In the Luno app, tap your initials icon at the top left to open the Account Hub.
2. Select Security, then Two-factor authentication, then Get Started.
3. Tap the 2FA setup key to copy it, and save a copy somewhere safe (see below).
4. In Novaz, tap +, then Enter key manually. Type Luno as the Service and paste the key as the Setup key. See What is a 2FA setup key?
5. Touch and hold the new Luno entry in Novaz, then tap Copy code.
6. Go back to the Luno app. Luno's help says it fills in the copied code and turns 2FA on.

Luno's restore steps add this key to Google Authenticator by hand as a time-based key, so typing it into Novaz works too (Luno).

Or on the website

Open Luno's two-factor authentication settings page and select SETUP 2FA. The Setup your 2FA app screen shows a QR code and a Setup key. In Novaz, tap +, then Scan QR code, or type the key with Enter key manually. Then enter the 6-digit code from Novaz (Luno).

The setup key is your backup

Luno's help mentions no backup codes. Instead, it explains how to restore your authenticator from a saved copy of the setup key (Luno). Unless you back up Novaz with iCloud backup or a backup file, its keys live only on your iPhone, so that key is your backup. Store it in a password manager, and guard it: anyone who has it can make your codes. Luno's help doesn't say you can view the key again later.

When Luno asks for a code

Every time you sign in, after your password, on the Enter your 2FA code screen (Luno, Luno). In Malaysia, South Africa and Nigeria, also when you turn on sends or send crypto, unless you have a passkey.

Luno's own one-time PINs, sent by email or by push to a trusted device, are different codes (Luno), so check which one the screen wants.

If Luno rejects your code

Luno's help suggests three checks (Luno):

• Make sure you're reading the Luno code, not another account's.
• Luno allows some timing leeway: try a fresh code as soon as it appears, or near the end of its countdown.
• Set your iPhone's clock automatically: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.

More causes are in Authenticator code not working? If nothing works, use the recovery routes below.

Changing phones

Luno's help doesn't describe a transfer. If you have a Novaz iCloud backup or backup file, restore it on the new iPhone and Luno comes with it. Otherwise, with the saved setup key, add Luno on the new iPhone with Enter key manually before you wipe the old one. Without it, use account recovery (below). Luno says a 2FA reset on a new phone holds crypto sends and cash withdrawals for 48 hours (Luno). See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

1. You saved the setup key: add it to Novaz with Enter key manually (Luno).
2. You still have your email and mobile number: sign in with your email and password. On Enter your 2FA code, select HAVING TROUBLE (some pages say Having trouble?), then I can't access my authentication app, then Next. You confirm your password, an email code, your identity number and an SMS code (Luno). Luno's newest page says 2FA is then turned off after 48 hours (Luno).
3. Neither: contact Luno support. It asks for a clear photo of you holding your ID and a handwritten note with today's date and "For Luno use only, please reset my 2FA". Printed notes aren't accepted, and Luno may also call the mobile number on your account (Luno). It doesn't say how long this takes.

Don't open a new Luno account to get around it: Luno says a duplicate account makes recovery harder (Luno). See Lost the phone with your authenticator app?

Turning 2FA off, and fake support

Luno's help describes no switch to turn 2FA off in settings, only the recovery routes above. Luno never contacts you out of the blue to ask you to remove 2FA, never asks for your codes, and only helps remove 2FA after you've contacted it (Luno). Anyone else asking is a scammer.

Official Luno help

• What is two-factor authentication, and how do I set it up?
• I can't access my authentication app. What can I do?
• My 6-digit authentication code isn't working. What can I do?
• I'm locked out of my account
• My phone is lost, stolen or replaced
• Passkey or 2FA required to send cryptocurrency
• What is a trusted device, and how do I enable it?
• Beware of fake support calls and emails targeting Luno accounts
• How do I keep my Luno account safe?