Moneybird 2FA: how to set up an authenticator app

Moneybird is online bookkeeping software for invoices, bank transactions and VAT returns. Moneybird calls its two-factor authentication "twee-staps-verificatie" (two-step verification) and offers three kinds: push approvals in the Moneybird mobile app, passkeys, and an authenticator app that shows a 6-digit code (Moneybird). This guide covers the authenticator app. We use Authenticator App - Novaz on iPhone, but any authenticator app follows the same steps.

One thing to know first: if you later switch on 2FA inside the Moneybird mobile app, Moneybird deletes your authenticator app setup, and its 6-digit codes and backup codes stop working (Moneybird).

How we checked this guide: the Moneybird steps come from Moneybird's own help center, linked below, which we read on October 21, 2026. The help center is in Dutch, so the labels here are Moneybird's Dutch ones with an English meaning in brackets. We haven't tested them on a Moneybird account, so a label may differ slightly, especially if you use Moneybird in another language. The Novaz steps are checked against the app, version 1.0.5.

Is 2FA required?

Not for everyone. It becomes required when:

• The owner of a Moneybird administration makes it mandatory. The owner turns it on under Instellingen > Beheer > Beveiliging > Twee-staps-verificatie (2FA) verplichten, separately for each administration. Users and accounting-firm staff without 2FA are blocked from that administration until they set it up, and the owner can't undo the requirement afterwards (Moneybird).
• You use a Moneybird business account (Betaalrekening). Moneybird says some parts of the product, including that account, need 2FA to stay on (same page).

Turn on 2FA with an authenticator app

Moneybird's help article describes these steps (Moneybird):

1. Click your account name at the top right, then go to Gebruikersaccount (user account) > Beveiliging (security) > Twee-staps-verificatie > Authenticatie-app.
2. Moneybird shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
3. Click Volgende (next).
4. Type the 6-digit code from Novaz and click Beveilig mijn account (secure my account). Moneybird asks you to confirm with your password or your current 2FA method.
5. Save the ten backup codes, tick Ik heb de back-up codes opgeslagen (I've saved the backup codes) and click Volgende.

Moneybird's article doesn't mention a text key to type instead of scanning. If you see one, use +, then Enter key manually in Novaz (What is a 2FA setup key?), but scanning is safer because the QR code carries the code settings.

Your ten backup codes

Each backup code is 16 characters long, dashes included. The list looks like one long block, but every row is a separate code, and you type one row at a time (Moneybird). If you never saved them, you can ask for new ones under Gebruikersaccount > Beveiliging > Twee-staps-verificatie (Moneybird).

Signing in with a backup code removes every 2FA method on your account, so you have to set one up again afterwards (Moneybird). Novaz's keys stay on your iPhone unless you turn on iCloud backup or export a backup file, so keep these codes too. Store them away from your phone. More in 2FA backup codes.

When Moneybird asks for a code

You enter a code after your email address and password when you sign in. Moneybird also asks for your second factor before secured actions, such as inviting a user to your administration or requesting a payment card (Moneybird).

With 2FA on, you no longer get the emails that ask you to confirm a sign-in from an unfamiliar location. Those are only for accounts with a password and nothing else (same page).

If Moneybird rejects your code

Moneybird blames the phone's clock: if it drifts, the codes come out wrong, and the fix is automatic date and time (Moneybird). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off.

If that doesn't help, sign in with a backup code. Other causes are in Authenticator code not working?

Set up a recovery option now

Moneybird lets you prepare a way back in, under Gebruikersaccount > Beveiliging > Herstelopties (recovery options). It only works if you set it up before you lose access (Moneybird):

• Identiteitsbewijs: scan a passport, driving license or ID card in the Moneybird mobile app, under Verifieer identiteit.
• Jouw IBAN: save a bank account only you can pay from. To recover, you make a €0.15 payment from it, and Moneybird emails backup codes once the money arrives, which can take a few days.
• If you don't own an administration, Moneybird can revoke your access rights instead, and you get invited again.

If you lose your authenticator

With your email address and password still working, use a backup code or one of the recovery options above. You start them from the sign-in screen through Problemen met inloggen/passkeys/code? (Moneybird).

Without either, Moneybird falls back to a manual check. You fill in a contact form after signing in with your password, and Moneybird mails a letter with a code to the company's address as registered with the Dutch Chamber of Commerce (KvK), or in VIES for companies outside the Netherlands. You send the code back by email. To speed things up, Moneybird asks for your name, company name, login email, KvK or VAT number, company address and the number of one of your Moneybird subscription invoices (Moneybird). Moneybird doesn't say how long the letter takes. A bookkeeper can't do this for a client: the account owner has to ask. See also Lost the phone with your authenticator app?

Changing phones

Moneybird's advice is to add a second 2FA method first, then delete the old one with the trash can icon (Moneybird). If you replace the authenticator app itself, Moneybird asks for a code from the app that's already set up, so keep the old phone working until you're done (Moneybird). With a Novaz iCloud backup or backup file, you can restore the account on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.

Turning 2FA off

Go to Gebruikersaccount > Beveiliging > Twee-staps-verificatie > Authenticatie-app, enter your password to start a secure session, and delete the method with the trash can icon. If 2FA is required in an administration you work in, set up another method first (Moneybird). Then open Moneybird in Novaz and tap Remove account.

Official Moneybird help

• Twee-staps-verificatie via een authenticatie-app
• Beveilig je account optimaal
• Je beveiligingsinstellingen beheren
• Inloggen met 2FA lukt niet door tijdsafwijking
• Twee-staps-verificatie uitschakelen of van methode wisselen
• Twee-staps-verificatie verplichten voor iedereen in jouw administratie
• Twee-staps-verificatie via de Moneybird-app
• Herstelopties instellen en gebruiken
• Problemen bij het inloggen
• Verificatieprocedure bij inlogproblemen