Monarch (Monarch Money) 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Monarch, the budgeting and net-worth app that used to go by Monarch Money, moved from monarchmoney.com to monarch.com in October 2025 (Monarch). Monarch's multi-factor authentication (MFA) is optional and uses one method: a code from an authenticator app, on top of your password (Monarch). There is no text-message option in its help. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Monarch steps come from Monarch's own help center, linked below, which we read on October 22, 2026. The article pages refused automated requests, so we read the same articles through the help center's public article feed on Monarch's own help domain. We haven't tested the steps on a Monarch account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Two things to know first
- Setup happens on the web. Monarch's help says to set up MFA from the website, so have a computer or a desktop browser ready, not just the mobile app (Monarch).
- Google and Apple sign-ins need a password. If you sign in with Continue with Google or Continue with Apple, you first have to create a Monarch password under Settings > Security before MFA can be turned on (Monarch). For Google accounts, Monarch describes a Create password button on that page that emails you a link; the email has to be opened on the web, not in the mobile app (Monarch).
Turn on 2FA with an authenticator app
Monarch's MFA article, updated October 20, 2026, gives these steps (Monarch):
- In a browser, sign in at app.monarch.com and go to Settings > Security.
- In the Multi-Factor Authentication section, select Enable MFA.
- In the popup, select Set up using an app.
- Monarch shows your recovery codes now, before the QR code. Download, print or copy them, then select Next.
- Monarch shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If you opened Monarch on your iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the 6-digit code Novaz shows into Monarch to finish.
Monarch's article only describes scanning. It doesn't mention a text key you could type instead, so plan on scanning the QR code. If your screen does offer a key, you can add it in Novaz with +, then Enter key manually, filling in Service and Setup key. See What is a 2FA setup key?
Your recovery codes are the backup
Monarch suggests authenticator apps that back up codes to the cloud, so a lost phone can be restored (Monarch). Novaz can do this if you turn on iCloud backup or export a backup file; without one, its keys exist only on your iPhone. Either way, keep the recovery codes from step 4 as your fallback. Monarch's own tip is to treat them like your password and keep them in a password manager. Paper in a safe place works too. See 2FA backup codes.
Monarch's help doesn't say how many codes you get, whether each one works once, or how to make a new set.
The email code is a separate thing
Monarch also emails a one-time passcode when you sign in from a device or browser it doesn't recognize, with the subject "Monarch code" followed by the digits (Monarch). That check applies whether or not MFA is on. With MFA on, your authenticator code is the one Monarch's MFA article says you need at sign-in, in addition to your password. Check which one the screen asks for.
If Monarch rejects your code
Monarch's help doesn't cover rejected authenticator codes. The most common cause is the phone's clock. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
Monarch doesn't describe moving MFA to a new phone. Its help does say you can turn MFA off and on at any time in Settings > Security, so the practical route is to do that from the web while your old phone still works, then scan the new QR code on the new phone. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead; without one, each account has to be added again. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of the recovery codes you saved during setup. That is the only recovery route Monarch's MFA article gives (Monarch). Once you're in, turn MFA off and set it up again on your current phone.
Without the codes, the help center's general advice for sign-in trouble is to email support@monarch.com, or use the support link in the app if you're still signed in somewhere (Monarch). Monarch doesn't say what proof it asks for or how long a reset takes. See Lost the phone with your authenticator app?
Turning MFA off
In Settings > Security, you can switch MFA off at any time (Monarch). Monarch doesn't list the exact button or say whether it asks for a code first. After that, remove the Monarch entry in Novaz: open it and tap Remove account.
