MEXC 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your MEXC account holds your crypto on the MEXC exchange. Besides your password, MEXC can check email codes, SMS codes, passkeys and an authenticator app. Its help pages only name Google Authenticator, but the codes are standard ones: 6 digits, a new one every 30 seconds, set up from a QR code or a key (MEXC). Any authenticator app makes them. This guide uses Authenticator App - Novaz on iPhone; other apps work the same way.
Once the app is linked, MEXC asks for a code at every login (MEXC). MEXC recommends it, and its pages don't make it mandatory. They mention no backup codes either, only the setup key, which it tells you to save before you finish (MEXC).
How we checked this guide: the MEXC steps come from MEXC's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a MEXC account, so a label may differ slightly. The website and the MEXC app also label the setting differently. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
On the MEXC website (MEXC):
- Log in, open the user icon and go to Security.
- Click Enable MEXC/Google Authentication.
- Skip the QR code for downloading Google Authenticator and click Next.
- MEXC shows a QR code and a key. In Novaz, tap +, then Scan QR code. If you're on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- Or tap +, then Enter key manually, and paste the key into Setup key. See What is a 2FA setup key?
- Save a copy of the key before you go on (see below).
- Click Get Code, enter the code MEXC emails you, then the 6-digit code from Novaz, and click Submit.
In the MEXC app, go from the user icon to Security, then Google Authenticator. Tap Next, add the QR code or key to Novaz, and tap Next again. Pass the extra security check and tap Confirm, then enter the Novaz code and tap Confirm.
Save the key: it's your backup
The key MEXC shows during setup is the secret behind your codes. MEXC says you'll need it to restore the authenticator if your phone is lost or replaced (MEXC). Without a Novaz iCloud backup or backup file, its keys exist only on your iPhone, so store the key on paper or in a password manager, and guard it like a password. If you ever unlink and link again, MEXC makes a new key and QR code, so save the newest one (MEXC).
When MEXC asks for a code
- Every login (MEXC).
- Withdrawals, until you add a passkey: MEXC's passkey guide says withdrawals then stop asking for 2FA codes (MEXC).
- Adding a passkey or removing the authenticator, together with an email or SMS code (MEXC, MEXC).
Three wrong codes bring up Too many incorrect codes. After five, MEXC alerts you by SMS, on-site message and email (MEXC).
If MEXC rejects your code
MEXC suggests checking your phone's time, restarting the phone if codes fail just after linking, and using the entry for your MEXC email if you have several (MEXC). On iPhone, set the time with Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes: Authenticator code not working?
Changing phones
With the saved key, add MEXC to Novaz on the new iPhone through Enter key manually. Without it, unlink the authenticator while the old phone still works, then link it again. Removing it pauses withdrawals and crypto transfers for 24 hours (MEXC). A Novaz iCloud backup or backup file also brings MEXC to the new iPhone; see How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
- Saved key: set up Novaz again from it.
- Passkey: if you've added one, MEXC lets you remove the authenticator with passkey verification (MEXC).
- Reset request: where MEXC asks for the authenticator code, choose Reset Security Verification? and mark the authenticator as unavailable (Reset Google Authenticator in the app, Google Authenticator is unavailable. Request a reset on the website), then Reset. After an email code, MEXC asks your last login date and country or region, recently traded pairs and roughly how much you hold, then wants a contact phone number, an SMS code and a photo of you holding your identity document. Customer Service reviews it within 1 business day, and the 24-hour withdrawal pause follows (MEXC).
MEXC's general reset article, from September 2026, can ask for more: proof of where funds came from and went, a new email or phone number, and a video of you holding your ID beside a sheet with your UID. It gives no timeframe beyond "as soon as possible" (MEXC). See also Lost the phone with your authenticator app?
Turning 2FA off
MEXC advises against it without a reason. On the website, go to Security, click Remove next to MEXC/Google Authenticator Code, then Unlink Anyway. Click Get Code, enter that code and a Novaz code, and click Submit. In the app, tap Google Authenticator under Security, enter an email or SMS code and the Novaz code, and tap Confirm (MEXC). Then open MEXC in Novaz and tap Remove account.
