MYOB 2FA: how to set up an authenticator app

With MYOB, two-factor authentication (2FA) isn't optional. The first time you sign in to its online software, such as MYOB Business, MYOB asks you to pick a method before you can carry on (MYOB). It recommends an authenticator app, with text messages as a backup. Email codes still work for people who chose them earlier, but can't be added now and are being phased out in 2027 (MYOB).

This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the MYOB steps come from MYOB's own Australian support pages, linked below, which we read on October 21, 2026. We haven't tested them on a MYOB account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Set up the authenticator app at first sign-in

MYOB's steps for a new setup (MYOB):

1. Sign in to MYOB with your email address and password.
2. When MYOB asks for your preferred method, click Authenticator app.
3. If MYOB asks for your phone's operating system, pick it and click Next. Then click OK I've downloaded the app.
4. MYOB shows a QR code. In Novaz, tap +, then Scan QR code. On the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
5. If scanning fails, click Can't scan the QR code? to see the setup key. In Novaz, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
6. Type the code Novaz shows into Enter your code and click Continue.
7. On Save a recovery code, click Copy code and store it somewhere other than your phone.
8. Tick I understand I need this code if I cannot sign in the usual way, then click Continue.

MYOB says app codes refresh every 30 seconds, which matches a key typed by hand into Novaz (MYOB).

Already set up with SMS or email?

Add the app from My Account: sign in at myaccount.myob.com, click your user name, choose Account security, and click Add for Authenticator app. After a code from your current method, you get the same QR code screens (MYOB).

One recovery code, replaced each time you use it

MYOB doesn't give you a list of backup codes. You get one recovery code, it works once, and MYOB issues a new one when you use it, so replace your saved copy each time (MYOB). Unless you've turned on iCloud backup or exported a backup file in Novaz, its keys exist only on that iPhone, so that code and an SMS method are your way back in if the phone is gone. More in 2FA backup codes.

Add SMS as a second method

MYOB recommends SMS as the backup to the app. Add it the same way, from Account security. It matters when you change phones: you can only reset the app method yourself when you have another way to verify. At sign-in, "Authenticator app will always be the first 2FA method presented" (MYOB).

How often MYOB asks for a code

MYOB says you need to pass the 2FA check once every 24 hours while you're actively working in its software (MYOB). With a passkey you may skip it, but 2FA must still be set up, and MYOB can ask for a code when you change security settings.

If MYOB rejects your code

MYOB's troubleshooting page lists these causes (MYOB):

• The wrong account. With more than one MYOB login, check that the code belongs to the email you're signing in with.
• An old code. Use the code showing now.
• The clock. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off.
• Too many tries. Too many wrong codes lock the account for twenty minutes.

More causes are in Authenticator code not working?

Changing phones

MYOB's way is to reset the app method from My Account while you still have another way to verify (MYOB):

1. In My Account, open Account security. If you don't have SMS yet, click Add to set it up first.
2. Click the ... button for Authenticator app, choose Reset, then Reset authenticator app.
3. Verify with an SMS code or your recovery code.
4. Scan the new QR code with Novaz on the new iPhone, enter the code, and save the new recovery code.

With Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone and skip the reset. Without one, each account needs a reset like this. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

At the code prompt, click Try another method. On Other methods, choose SMS if you set it up, or Recovery code, enter it and click Sign in. MYOB then asks you to save a new recovery code (MYOB).

With neither, use the chat bubble on MYOB's help pages to reach MOCA, its virtual assistant, which hands you to live chat if it can't help. MYOB says to have your account details ready, but not what proof it asks for or how long it takes (MYOB). More in Lost the phone with your authenticator app?

Can you turn 2FA off?

No. MYOB requires at least one method, so you can only remove an extra one with ... and Remove in Account security (MYOB).

Official MYOB help

• Two-factor authentication
• Setting up two-factor authentication
• Setting up additional two-factor authentication (2FA) methods
• Setting up two-factor authentication on a new phone
• Using your recovery code
• Getting help with two-factor authentication
• Comparing passkeys and 2FA methods