MxToolbox 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
MxToolbox is the email and DNS toolkit many admins use for blocklist checks, monitors and the Delivery Center. Its free lookup tools don't need an account at all, and two-factor authentication (2FA) isn't for everyone who has one: MxToolbox offers it to paid users only (MxToolbox). If you're on a paid plan, you can choose between text-message codes and time-based codes from an authenticator app, which MxToolbox calls a Software Token. Nothing in its help says 2FA is required.
This guide uses Authenticator App - Novaz on iPhone for the app side. Any authenticator app works the same way.
How we checked this guide: the MxToolbox steps come from MxToolbox's own help center, including the screenshot in its two-factor article, which we read on October 21, 2026. We haven't tested them on a MxToolbox account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
What MxToolbox's help covers, and what it doesn't
MxToolbox has a single short help article on two-factor authentication. It says where the setting lives and which methods you can pick. It doesn't show the authenticator setup screen, and it says nothing about backup codes, trusted devices or account recovery. Where this guide says MxToolbox doesn't say something, that's why.
Turn on 2FA with an authenticator app
The quickest way in is the MFA Settings Page link in the help article, which opens mxtoolbox.com/user/twostepverification. MxToolbox asks for your password a second time before it shows that page, to confirm you signed in recently (MxToolbox).
To get there from the menus instead:
- Sign in to MxToolbox.
- Click your email address in the top right corner, then Settings.
- Open the 2FA tab in the black menu bar. The article's text calls it 2-Factor Authorization, but its screenshot shows 2 Step Verification, so look for either.
- Under Two-Factor Authentication (2FA), choose Software Token. The screenshot marks it (recommended). The other choices are Text Message and Disabled.
- Follow the instructions MxToolbox shows on screen.
MxToolbox's article doesn't describe what comes next, so here is how to handle it in Novaz:
- If MxToolbox shows a QR code, tap + in Novaz, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If it shows a text key, tap +, then Enter key manually. Type "MxToolbox" as the Service, your email as the Account if you like, and the key as the Setup key. See What is a 2FA setup key?
- If MxToolbox asks for a code to confirm, type the current one from Novaz.
When it works, the page shows Status: Enabled in the top right and a line saying 2FA is set up, with your current verification method below it (MxToolbox).
Shared accounts
If your MxToolbox account has several users, you can check who has turned 2FA on from the Account Management page (MxToolbox). The help doesn't mention a way for an owner to require it for everyone.
Backup codes
MxToolbox's help doesn't mention backup or recovery codes. If the setup screen offers any, save them somewhere other than your phone. Without a Novaz backup, its keys exist only on that iPhone. More in 2FA backup codes.
If MxToolbox rejects your code
MxToolbox doesn't give advice for this. Start with the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Also make sure you're reading the MxToolbox entry and not another account. Other causes are in Authenticator code not working?
New phone or lost phone
MxToolbox doesn't document a transfer or recovery process. Two things follow from the article:
- While you can still sign in, you can switch the method on the same page. Picking Disabled, or switching to Text Message, lets you set up the authenticator again on a new phone. If you turned on iCloud backup or exported a backup file in Novaz, you can restore your accounts on the new iPhone instead, and the codes keep working. See How to transfer your authenticator app to a new iPhone.
- If you're locked out, the route MxToolbox gives for any account problem is a support ticket. It has no support email address and asks that all requests go through the ticket form (MxToolbox). It doesn't say what proof it asks for or how long a 2FA reset takes. Paid customers get support in English during business hours (MxToolbox).
More in Lost the phone with your authenticator app?
Turning 2FA off
The help article lists Disabled as one of the three choices on the 2FA tab, so go back there and pick it. You'll be asked for your password again on the way in (MxToolbox). Then remove the entry from Novaz: open it and tap Remove account.
