Neto by Maropost 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Neto by Maropost is the ecommerce platform at netohq.com, run from the Neto control panel. If you know it as Maropost Commerce Cloud, Maropost's old help links under that name now open the Neto articles (Maropost).
The control panel sign-in now goes through Maropost Identity, Maropost's shared login. Maropost says multi-factor authentication (MFA) is mandatory when you sign in with Maropost Identity, so you set up an authenticator app as part of creating the Identity account (Maropost). Alongside the app there are recovery codes and optional passkeys. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Neto steps come from Maropost's own Neto help articles on its Galaxy community site, including their screenshots, which we read on October 21, 2026. We haven't tested the steps on a Neto account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
You meet the MFA screens once, when you link your control panel login to Maropost Identity. That happens either from a Sign Up to Maropost Identity banner in the control panel or from an invitation email that a Neto admin sends you (Maropost, Maropost).
- Finish the Identity sign-up: confirm your email and name, choose a password, and select Sign Up.
- You land on the Security App Authentication page with a QR code (Maropost).
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If the page is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Select Continue.
- Type the six-digit code from Novaz and select Submit.
- Save the recovery codes on the next page (below), tick the box saying you've saved them, and select Complete.
Neither the article nor its screenshot shows a text key to type instead, and Maropost doesn't say how often the codes change. Scan the QR code: it hands Novaz the right settings.
Save the recovery codes before you leave the page
The backup code page lists recovery codes for the day you can't use your authenticator app. Maropost is clear that this page is the only place they're shown (Maropost). Its screenshot shows Print, Download and Copy buttons and a checkbox, I have saved these codes somewhere safe.
Novaz's keys stay on your iPhone unless you turn on iCloud backup or export a backup file, so keep these codes as your way back in. Keep them away from the phone, on paper or in a password manager. If you lose them, you can make a new set later from the Identity portal (see below); the old set then stops working. More in 2FA backup codes.
When Neto asks for a code
After your email and password, Neto shows a Multi-Factor Authentication Required page where you enter the six-digit code and select Login (Maropost). If you tick Remember Me on the sign-in page, Maropost says you can skip both the password and the code for up to 30 days, unless you sign out yourself.
A passkey skips the code entirely. You can add one in the Identity portal under Security > Passwordless > Set Up Passkey, and then choose Use Passkey on the sign-in page (Maropost).
If Neto rejects your code
Maropost's Neto pages don't give advice for a rejected code. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
New phone or new recovery codes
Both live in the Maropost Identity portal at id.maropost.com. From the Neto control panel, click your username at the top right and choose Manage account and password, then open the Security tab (Maropost). Under Two-factor authentication:
- OTP replaces your current authenticator setup with a new one. Use it to move to a new phone.
- Recovery Codes makes a fresh set when you've lost the old one.
The screenshot shows a Re-Configure button next to each, and notes that new recovery codes make the old ones unusable. Maropost's Identity portal article for its other products adds that you sign in again and go through MFA before the change (Maropost). So do this while the old phone still works. If you have a Novaz iCloud backup or backup file, you can restore the account on the new iPhone instead of re-configuring OTP; see How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your saved recovery codes, then use OTP in the Identity portal to set up Novaz again on your new phone. That's what Maropost says the codes are for (Maropost).
Without the codes, Maropost's Neto help doesn't describe a recovery process, what proof it would ask for, or how long it takes. The screenshot of the code page shows Try Another Way and Contact Support links under the code boxes, so start there. More in Lost the phone with your authenticator app?
Turning 2FA off
Maropost doesn't document a way to turn it off, since it calls MFA mandatory for Maropost Identity sign-in (Maropost). Its Neto account article also links MFA to the 90-day password rule: you can opt out of password expiry only while MFA is on (Maropost).