Miro 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Miro is the online whiteboard teams use for workshops, diagrams and planning. Don't look for a two-factor authentication (2FA) switch in your Miro profile: there isn't one. In Miro, 2FA is a rule a team or company admin turns on for the whole team, and each person then sets it up at their next sign-in (Miro). It isn't on the Free plan, and the only second factor Miro's help describes is an authenticator app. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Miro steps come from Miro's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a Miro account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Who gets asked for a code
Miro dropped passwords. You sign in with a magic link sent to your email, with single sign-on (SSO), or with a social account such as Google, Microsoft or Apple (Miro). Miro's 2FA covers only the magic link. SSO and social sign-ins never get a Miro code prompt; any second step there belongs to that provider (Miro).
Miro's 2FA article lists Starter, Business, Education and Enterprise, though its plan table leaves Education unticked (Miro).
For admins: require 2FA
You need the Team admin role on Starter and Education, or the Company admin role on Business (Miro):
- On your Miro dashboard, click your avatar in the top-right and select Admin Console.
- Go to Security > Permissions (Starter), Permissions (Education) or Security > Authentication (Business).
- Under Two-factor authentication (2FA), turn on Require two-factor authentication when signing in.
On Enterprise, turn on Enforce 2FA for non-SSO users under Security > Authentication. Nobody gets signed out; people see the setup screen at their next sign-in (Miro). That includes you, if you use a magic link. Miro's pages don't describe switching the rule off.
Set up the authenticator app
Use a web browser or Miro's desktop app: the Enterprise admin guide says first-time setup doesn't work in the mobile and tablet apps. These steps follow Miro's user guide (Miro):
- Sign in with a magic link. On the 2FA setup screen, click I have an authenticator app.
- Miro shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. Then click I scanned the code. If the code is on your iPhone's own screen, take a screenshot and use Choose a photo (see scanning a QR code on the same iPhone).
- Can't scan? Click Can’t scan QR code?. Miro shows the key, which it calls an authentication code. In Novaz, tap +, then Enter key manually, and enter it as the Setup key (more on setup keys). Then click I added the code.
- Type the 6-digit code from Novaz and click Verify code.
- Miro shows a recovery code. Click Copy and store it, select I have recorded this code, then click Continue.
Miro doesn't say how often its codes change, so scan if you can. The QR code passes the exact settings to Novaz, while a typed key always gets 6 digits every 30 seconds.
Your one recovery code
Miro gives you one recovery code, not a list. Its help mentions just one use: resetting 2FA yourself so you can set up the app again. Without a Novaz iCloud backup or backup file, its keys stay only on your iPhone, so this code is your fallback: keep it off your phone, in a password manager or on paper. Miro doesn't say whether it works twice, so save any new code it shows after a reset. See 2FA backup codes.
Signing in afterwards
Every magic-link sign-in asks for the code, and three wrong tries send you back to the start (Miro). On Starter, Business and Education, Trust this device for 30 days is ticked by default; untick it on a shared computer. On Enterprise, the admin sets 7 to 90 days or turns trust off (Miro). To undo trust on a device you've lost track of, go to Profile > Profile settings and click Sign out of everywhere. The user guide calls it Sign out everywhere, so the label may differ.
If Miro rejects your code
For an Invalid code error, Miro says to check your device's time zone, date and time, then try setting up 2FA on a different device if it keeps failing (Miro). On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes: Authenticator code not working?
New phone or lost phone
Miro has no separate change-phone option. Its reset handles a lost device or any other reason to start over (Miro). At the code prompt:
- With your recovery code: click Reset two-factor authentication, enter it, and scan the new QR code with the new phone.
- Without it: click Ask your admin to reset, pick the organization if you're in several, and enter the verification code Miro emails you. Once an admin resets you, you set up 2FA again at your next sign-in.
Any admin in the organization can approve your request. An admin can start a reset unasked only if your email domain is verified in the organization (Miro). They find Reset two-factor authentication in the three dots (...) on your row under Admin Console > Users (Miro). Miro doesn't say how long this takes, or what an admin who loses both should do.
With a Novaz iCloud backup or backup file, you can restore Miro on the new iPhone and skip the reset. If you still have the old one, remove the Miro entry there with Remove account once the new phone works. See moving to a new iPhone and Lost the phone with your authenticator app?
