MB connect line 2FA: how to set up an authenticator app for mbCONNECT24

MB connect line makes industrial routers and the remote-access portal behind them, mbCONNECT24. Service teams sign in to that portal to reach machines in the field. MB connect line lists two-factor authentication for portal users with an authenticator app (TOTP), email or SMS (MB connect line). Its online help also describes a voice call option (MB connect line).

The unusual part: you don't switch it on in a personal security page. An administrator of your mbCONNECT24 account sets the sign-in method for each user, and the authenticator setup then runs the next time that user signs in. This guide uses Authenticator App - Novaz on iPhone for the app side. Any authenticator app works the same way.

How we checked this guide: the MB connect line steps come from MB connect line's own pages, linked below, which we read on October 21, 2026. On that day the RSP Online Help at cc-onlinehelp.com showed only a notice about restricted portal access, so we read its authentication page in an archived copy on web.archive.org, from November 2022. The step-by-step setup comes from MB connect line's PDF guide in its download portal, written in 2016 for mbCONNECT24 version 2.1.3, so your screens and labels may differ. We haven't tested the steps on an mbCONNECT24 account. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

MB connect line's documents call this method Password + Google Auth, after Google Authenticator, but the codes are standard 30-second codes, so Novaz works too (MB connect line).

Part 1, for the administrator. The PDF guide describes these steps (MB connect line):

1. In the portal, go to Administration > Users and open the user. If you're an administrator setting this up for yourself, open your own user.
2. On the User tab, change Authentication to Password + Google Auth. The same list has Password (no second step) and Password + SMS Code.
3. Save the settings.

Part 2, for the user. Sign in with your username and password as usual (administrators who changed their own setting sign out and back in). A four-step wizard opens once:

1. Information explains that the administrator changed your sign-in method. Select Next.
2. Scan QR-Code shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the portal is open on the same iPhone, take a screenshot, tap +, then Choose a photo (see scanning a QR code on the same iPhone).
3. Still on Scan QR-Code: if you can't scan, the page shows a text key under Or add your secretcode manually. In Novaz, tap +, then Enter key manually, type a name such as mbCONNECT24 as the Service, and type the key as the Setup key. MB connect line asks you to watch upper and lower case and avoid typos. The key in its example is 16 characters, which Novaz accepts. More in What is a 2FA setup key?
4. Verify Code: type the current code from Novaz in Code and select Next.
5. Status confirms the code was right and briefly explains how sign-in works now. Select Finish.

If the wizard shows an error after you enter the code, the guide says to go back with Prev and enter a fresh code.

Signing in afterwards

From then on, every sign-in to mbCONNECT24 takes your username and password first, then a code from the app in a field labeled Enter Google Auth Code (MB connect line). The 2016 guide adds that the mbDIALUP remote client needs version 3.6 or later to sign in this way. The pages we read don't mention a "remember this device" option.

No backup codes in the documentation

Neither the PDF guide nor the online help mentions backup or recovery codes. That matters with Novaz: unless you turn on iCloud backup or export a backup file, its keys exist only on your iPhone. Lose the phone without one and the way back in runs through a person (below). Background in 2FA backup codes.

If mbCONNECT24 rejects your code

Apart from the Prev tip above, MB connect line gives no advice here. Codes change every 30 seconds, so a wrong phone clock is the usual cause. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

If the whole sign-in page is unreachable, check MB connect line's status page. In October 2026, for example, it restricted access to all mbCONNECT24 portals for a while as a precaution against PHP security flaws (MB connect line).

Lost phone, new phone, or turning it off

MB connect line's pages don't describe a recovery process, a way to move the authenticator to a new phone, or how to switch it off yourself. What they do show is that the sign-in method is a per-user setting under Administration > Users, with Password as one of the choices (MB connect line). So in practice your first contact is an administrator of your mbCONNECT24 account. The documents don't say what happens when the only administrator is the one locked out. In that case, MB connect line's support channel is its Helpdesk.

The guide also doesn't say whether the setup wizard runs again after an administrator changes the setting back and forth. With a Novaz iCloud backup or backup file, you can restore mbCONNECT24 on a new iPhone; without one, a new phone means adding it again. Before you give up the old phone, ask your administrator how they handle that. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

Official MB connect line help

• 2-Factor-authentication via Google Auth (PDF guide, download portal)
• Authentication (RSP Online Help, archived copy from November 2022)
• Remote Service Portal
• MB connect line systems Status