netcup 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
netcup is a German hosting company that sells servers, web hosting and domains. You manage everything you rent from it in the Customer Control Panel (CCP), signing in with your customer number and a password. Two-factor authentication on the CCP isn't optional. Every new account starts with a 6-digit token sent by email, and netcup doesn't let you switch 2FA off completely. What you can choose is where the code comes from: your inbox or an authenticator app, which netcup recommends (netcup).
This guide moves your CCP sign-in from email codes to Authenticator App - Novaz on iPhone. Any authenticator app that makes time-based codes works the same way.
How we checked this guide: the netcup steps come from netcup's own help center, linked below, which we read on October 24, 2026. We haven't tested them on a netcup account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Email code or authenticator app
netcup's help compares the two options (netcup):
- Email token: on by default, nothing to install, and the code stays valid for 15 minutes. The weak point is your mailbox: if someone gets into it, they get your codes too, and if you lose it, you can't sign in.
- Authenticator app: codes are made on your phone, work offline, and change every 30 seconds. You can still reach the CCP when your email is down.
There are no text-message codes or YubiKey keys.
Use a second device
netcup asks you not to keep the authenticator app on the same device you use to sign in to the CCP (netcup). So if Novaz is on your iPhone, do the setup and your later sign-ins from a computer.
Turn on 2FA with an authenticator app
These steps follow netcup's help pages (netcup, netcup):
- On your computer, sign in to the Customer Control Panel at customercontrolpanel.de with your customer number, password and the email token.
- Open the Master Data menu item.
- Under Two-Factor Authentication (2FA), click Activate Two-factor authentication. netcup shows a QR code.
- In Novaz, tap +, then Scan QR code, and point the camera at the screen.
- If the camera won't read it, netcup also shows the secret as text. In Novaz, tap +, then Enter key manually, enter "netcup" as the Service, your customer number as the Account if you like, and the secret as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz into the Code field.
- Click Confirm two-factor authentication.
netcup's codes are 6 digits every 30 seconds, the same as a key typed into Novaz, so either way works.
After that, the CCP asks for your customer number and password, then the current Novaz code.
No backup codes in netcup's help
netcup's help doesn't mention backup or recovery codes, and it doesn't say whether the email token still works as a fallback once the app is set up. Its comparison table says authenticator tokens can be synced across several devices. That's true of some apps, but Novaz doesn't sync codes between devices. Its keys stay on your iPhone, though iCloud backup or a backup file lets you restore them on a new one.
The other netcup panels
The CCP setting covers the CCP. netcup's phishing guide adds two separate steps (netcup):
- Servers: turn on security mode in the Server Control Panel (SCP). It blocks direct sign-in to the SCP, so you reach it only through the CCP, using SCP Auto-Login under Overview (netcup).
- Web hosting: the Webhosting Control Panel has its own 2FA, under Account > My Profile.
If netcup rejects your code
An app code is only good for its 30 seconds, so type it before it changes. If codes keep failing, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?
Changing phones
netcup doesn't describe moving the authenticator to a new phone. Its help does document going back to email codes: in Master Data, click Deactivate Two-factor authentication, and the CCP emails you a token at each sign-in again (netcup). While you can still sign in with the old phone, you can do that and then run the setup again with the new one. With Novaz's iCloud backup or a backup file, you can skip that and restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
netcup's help doesn't explain what to do if you lose the app. The closest case it covers is losing access to your email address, and for that it sends you to Customer Support (netcup) and that's the place to ask. You can open a ticket on the support page, which asks for your customer ID, your name and the email address registered with netcup, or call the support line on weekdays (netcup). netcup doesn't say what proof it asks for to reset 2FA or how long it takes. General steps are in Lost the phone with your authenticator app?
Turning 2FA off
You can't. Deactivate Two-factor authentication only switches you back to email tokens. netcup says it keeps 2FA on for everyone because of a sharp rise in phishing attacks that stole sign-in details (netcup).
