Miles & More and Lufthansa 2FA: how to set up an authenticator app

Two-factor authentication for Lufthansa Group sign-ins is set up in your Miles & More account. Once it's on, Miles & More says you'll be asked for a code on "Lufthansa Group websites and apps" too (Miles & More). You need two-factor authentication to change your personal details. Using it at every sign-in is optional, but Miles & More recommends it. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Miles & More steps come from Miles & More's own help pages, linked below, which we read on October 11, 2026. We haven't tested them on a Miles & More account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

SMS or an app?

Miles & More offers codes by SMS or from an authenticator app. In its help, SMS codes only protect changes to your profile, while the app protects every sign-in (Miles & More). An app is also safer than SMS. See Authenticator app vs SMS.

Turn on 2FA with an authenticator app

Miles & More's help describes these steps (Miles & More):

1. Sign in at miles-and-more.com and go to Security in your account.
2. In the box Protect your account with two-factor authentication, choose Set up now. If you already use SMS codes, the box is called Improved security settings for your account, with Increase security now.
3. Add the code to your authenticator app:
   • On a computer: Miles & More shows a QR code. In Novaz, tap +, then Scan QR code.
   • On your iPhone: copy the "alphanumeric code" Miles & More shows. In Novaz, tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
4. Finish the setup with the six-digit code from Novaz.

Miles & More's help doesn't mention backup or recovery codes. If you lose your phone, you'll need the Service Centre (see below).

Signing in afterwards

Miles & More asks for the six-digit code when you sign in. The next time you sign in after setup, it asks whether the browser or app is trusted. You can save up to five trusted browsers or apps, so they don't ask every time. Cookies need to be on for that.

If your code is rejected

• Too many wrong codes block sign-in for 30 minutes (Miles & More).
• Miles & More suggests checking that you used the code for the right account: Miles & More or your Travel ID. If your app has more than one Lufthansa Group entry, use the one you set up most recently.
• Check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. More in Authenticator code not working?

Changing phones

While you still have the old phone, go to Security settings and use Change mobile device or authentication app, then Change now. Follow the steps with the new phone. Miles & More warns that if the new setup fails, you're signed out until you finish it. Then remove the old entry from your authenticator app. If you have a Novaz iCloud backup or backup file, you can restore the account on the new iPhone instead of changing the device. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Miles & More says you "can contact the Service Centre to reset two-factor authentication via app" by phone (Miles & More). You can only change the device yourself while you still have access to the current one. More in Lost the phone with your authenticator app?

Official Miles & More help

• Two-factor authentication via app
• Two-factor authentication by SMS