Netcore Email API 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Netcore Email API is the email-sending service (SMTP relay and sending API) inside Netcore Cloud's CPaaS dashboard, where teams manage sending domains, templates, reports and API keys. Netcore offers two kinds of two-factor authentication (2FA) for the panel: a one-time code sent by email, or a code from an authenticator app. Netcore's pages call the second option Google Authenticator, but it uses standard 6-digit codes, so any authenticator app works (Netcore). Netcore's pages don't say 2FA is required. This guide uses Authenticator App - Novaz on iPhone. Any other authenticator app works the same way.
How we checked this guide: the Netcore steps come from Netcore's own documentation and its official blog, linked below, which we read on October 22, 2026. Netcore has removed its two-factor help article from the current documentation, so we read an archived copy on web.archive.org, saved in November 2025. Both the article and the blog post date from 2020, and the dashboard has been redesigned since, so labels may differ. We haven't tested the steps on a Netcore account. The Novaz steps are checked against the app, version 1.0.5.
Check first: does your team use SSO?
Some companies sign in to the Netcore panel through Microsoft Entra ID single sign-on, which Netcore sets up on request. Once SSO is on for a panel, Netcore switches off the old sign-in methods, password and 2FA included, and everyone signs in through SSO (Netcore). In that case your company's own MFA protects the account, and there's nothing to set up in Netcore.
Turn on 2FA with an authenticator app
Netcore's blog post that announced the feature gives the location of the setting (Netcore):
- Sign in to your Netcore Email API account.
- Click your username at the top right of the screen, then Profile.
- Scroll down and turn on the switch labeled Google Authenticator.
- A pop-up shows a QR code and a setup key (Netcore, archived). Netcore's text tells you to download Google Authenticator. You can skip that and use Novaz.
- In Novaz, tap +, then Scan QR code, and point the camera at the code. If the code is on your iPhone's own screen, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If you can't scan, use the setup key from the same pop-up. In Novaz, tap +, then Enter key manually. Type Netcore in Service, your username in Account if you like, and the key in Setup key. See What is a 2FA setup key?
- Type the 6-digit code that Novaz shows into Netcore to finish turning it on.
After this, Netcore asks for a code from the app each time you sign in.
The email OTP option
The other method sends a one-time password to your registered email address. The archived article says each code is valid for 5 minutes and that you can choose a different address for these codes (Netcore, archived). Netcore's pages don't say whether you can turn on both methods at once.
Some actions use the emailed code whatever method you sign in with. For example, changing the file password that protects downloaded reports sends a 2FA code to your registered email address (Netcore). So keep that inbox working even if you use an app to sign in.
Shared accounts and the audit log
Many teams share one Netcore login. Once the account has an authenticator app, only the phone that scanned the QR code can produce sign-in codes. Agree on who holds it before you scan. The panel's Audit Log records 2FA Status Changed and 2FA Email Updated events, so account owners can see when someone changes these settings (Netcore).
No backup codes
Netcore's pages don't mention backup or recovery codes, and they don't describe a way to move the authenticator to a new phone. Novaz's iCloud backup or a backup file lets you restore your accounts on a new iPhone. Without one, you'll have to add Netcore again on the new phone when you switch. Make that change while the old phone still works and you can still sign in. See How to transfer your authenticator app to a new iPhone.
If Netcore rejects your code
Netcore doesn't publish advice for rejected codes. The most common cause is the phone's clock. On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
If you lose your authenticator
Netcore's pages don't explain how to recover an account when the authenticator is gone, what proof it asks for, or how long that takes. The only support address in its documentation that we found is helpdesk@netcorecloud.com, given on the SSO page for setup requests (Netcore). Contact Netcore from the email address on your account and give your username. General steps are in Lost the phone with your authenticator app?
Turning 2FA off
Netcore doesn't describe turning the app off. The Google Authenticator switch on your Profile page is the only control its pages mention (Netcore). Remove Netcore from Novaz (Remove account) only after 2FA is off in Netcore.
