monday.com 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
On monday.com you can't turn on two-factor authentication (2FA) just for yourself. It's a setting for the whole monday.com account, the workspace at an address like yourteam.monday.com, and only its admins can switch it on. Everyone it applies to then sets it up at their next login (monday.com). If you created the account, you're its admin by default (monday.com).
Each person picks an authentication app or text messages; admins can't limit the choice. Text messages aren't offered on free or trial accounts, so there an app is the only option. Guests can use 2FA too (monday.com). It only covers email-and-password logins: with single sign-on, your identity provider does the checking (monday.com). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the monday.com steps come from monday.com's own help center, including its screenshots, linked below, which we read on October 19, 2026. We haven't tested them on a monday.com account, and some screenshots show an older layout, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app (admins)
monday.com's help describes these steps (monday.com):
- Click your profile picture in the top right corner and select Administration.
- Open Security, then Authentication.
- Under Two-factor authentication, click Add two-factor authentication.
- Choose the method for your own login: select Authentication App (recommended) and click Continue.
- monday.com shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- Can't scan it? Under Can't scan this barcode?, use Copy code instead. In Novaz, tap +, then Enter key manually, and use that code as the Setup key. monday.com doesn't show this key or say how long it is, so scan when you can. See What is a 2FA setup key?
- Type the code from Novaz into the field marked Token and click Set up.
- Choose who must use 2FA: members, guests, or both. An older screenshot labels these choices Everyone, Members and Guests.
If your admin turned it on
At your next login, monday.com asks you to choose a method. Pick the authentication app, scan the QR code with Novaz as in step 5, and enter the code (monday.com). The help center doesn't show this screen, so its wording may differ.
When monday.com asks for a code
The Novaz code comes after your email and password. Closing the browser doesn't bring the prompt back: logging out does, and so does a new device or browser (monday.com).
Not every code at sign-in comes from Novaz. When a login looks suspicious, monday.com may email you a one-time passcode, which it calls account takeover protection and keeps separate from 2FA (monday.com). The desktop app's browser login also shows its own six-digit passcode (monday.com).
If monday.com rejects your code
monday.com's tip is to enter the code as soon as it appears, because codes change every 30 seconds (monday.com). If codes still fail, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. Other causes are in Authenticator code not working?
No backup codes
monday.com's help pages don't mention backup or recovery codes. The way back in they document is a reset by an admin, and without iCloud backup or a backup file, Novaz keeps its keys only on your iPhone. So know who your admins are: any user can open Administration and hover over the profile pictures at the top to see them. monday.com's own advice to admins: "It's always great to have a second admin, just in case" (monday.com).
Changing phones
You can change your own method without an admin. Go to My Profile, open Two-Factor Authentication and click Change Two-Factor Authentication Method (monday.com). Do it while the old phone still works, and scan the new QR code with Novaz on the new iPhone. monday.com doesn't say whether it asks for a current code first.
If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Ask an admin of your monday.com account to reset your 2FA (monday.com). In Administration, under Directory > Users, they open the three-dot menu on your row and choose Reset Two-Factor Authentication. You set up 2FA again at your next login (monday.com).
If you're an admin, another admin can do it. If you're the only one, monday.com's pages don't say what to do. Its general route to help is the help center chat, where an AI assistant can point you to a support agent (monday.com). Nor do they say what proof support asks for or how long it takes. More in Lost the phone with your authenticator app?
Turning 2FA off
monday.com's text doesn't describe turning 2FA off. An older screenshot of the admin settings shows a Cancel Two-Factor Authentication button, but the help doesn't explain it (monday.com).
