Mailchimp 2FA: how to set up an authenticator app

Your Mailchimp login is what you use to build campaigns, manage audiences and invite teammates into an Intuit Mailchimp account. Mailchimp's two-factor authentication (2FA) takes the second code from a text message or from an authenticator app, which its Account security page marks as (Recommended). New accounts are usually sent to that page at signup to pick one (Mailchimp). The unusual part: once 2FA is on, you can't turn it off. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Mailchimp steps come from Mailchimp's own help articles, linked below, which we read on October 20, 2026. We haven't tested them on a Mailchimp account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Know this before you start

• It's permanent. After setup, Mailchimp says "you won't be able to remove or disable it" (Mailchimp). You can only replace the app or switch to text messages.
• It reaches your whole team. When an Owner or Admin turns on 2FA, every other user on the account has to set it up at their next login, behind an Authenticator Passcode Required prompt (Mailchimp).
• Some logins don't use it. With Enterprise SSO, a Premium feature, your company's identity provider handles the second step instead (Mailchimp). Accounts set up through QuickBooks log in with an Intuit account (Mailchimp).

Turn on 2FA with an authenticator app

Mailchimp's help describes these steps, and says the codes must come from a mobile device (Mailchimp):

1. Open your Account security page. Mailchimp's article links straight to it.
2. In the 2-factor authentication section, select Authenticator app and click Next.
3. Follow the Set up authenticator app section. Mailchimp's article doesn't say whether it shows a QR code, a key, or both.
4. For a QR code, tap + in Novaz, then Scan QR code. If it's on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
5. For a key, tap +, then Enter key manually, and fill in Service, Account (optional) and Setup key. Mailchimp's codes are 6 digits and last 30 seconds, which matches a typed key in Novaz (Mailchimp). See What is a 2FA setup key?
6. Type the code from Novaz as the Authenticator code and click Enable.
7. Save the backup code on the confirmation page, then click Close.

Save the backup code

Mailchimp's setup article mentions one backup code, to keep offline or on another device in case your phone is lost, reset or damaged (Mailchimp). Unless you back up Novaz with iCloud backup or a backup file, its keys live only on your iPhone, so this code is your way back in. Write it down or store it in a password manager.

After you use it, Mailchimp gives you a new one to save. Its login help also says you can make new codes from your settings page, without naming the setting (Mailchimp). See 2FA backup codes.

When Mailchimp asks for a code

By default, Mailchimp asks every time you return to your account. The code goes in the Verification code field after your password. On a device you trust, the Keep me logged in and Skip this for 30 days check boxes cut down the prompts. Clearing cookies brings them back, and a new device always gets one (Mailchimp).

Separately, if you turn on Account verification, Mailchimp may text you a code when it sees unusual activity (Mailchimp).

If Mailchimp rejects your code

Mailchimp's own checks (Mailchimp):

• Make sure the code is for the right Mailchimp login, since your app may hold several.
• Use a fresh code. Each one lasts 30 seconds.
• Let your phone set the time automatically: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.

Don't keep retrying. Mailchimp locks an account for 24 hours after 10 tries to log in, though it doesn't say whether wrong codes count (Mailchimp). More causes are in Authenticator code not working?

Changing phones

Do it while you still have the old phone. On the Account security page, click Reconfigure next to Authenticator app and follow the prompts (Mailchimp). If you have a Novaz iCloud backup or backup file, you can restore Mailchimp on the new iPhone instead; without one, you add it again there. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

1. Use the backup code, then save the new one Mailchimp shows you (Mailchimp). Once you're in, use Reconfigure for your new phone.
2. Ask an Admin. Without the code, Mailchimp's only documented route is a new login: an Admin invites you as a new user and you sign up with a new username. Your old username stays locked out unless you find the backup code (Mailchimp).

Mailchimp's 2FA help doesn't describe a support process, what proof it asks for, or how long it takes. It does say it may use the legal name and address in your profile, and your contact phone number, to confirm who you are if you're locked out, so keep them current (Mailchimp). More help is in Lost the phone with your authenticator app?

Official Mailchimp help

• Set Up a 2-Factor Authentication App at Login
• Troubleshoot 2-Factor Authentication
• I Can't Log In
• Set Account Security Options
• Best Practices for Account Security
• Mailchimp Enterprise SSO