NiceHash 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
NiceHash is a marketplace for crypto mining hashpower, and your NiceHash account also holds a wallet. That makes two-factor authentication (2FA) worth more than usual: once it's on, NiceHash asks for a code when you sign in, when you withdraw funds from your NiceHash wallet, and when you place a new order (NiceHash). NiceHash's help doesn't say 2FA is required, but it strongly recommends it (NiceHash).
Two kinds of second factor are documented: a time-based code from an authenticator app, and a Yubico OTP hardware device (NiceHash). This guide covers the app. We use Authenticator App - Novaz on iPhone, but any authenticator app works the same way. NiceHash's own pages name Google Authenticator.
How we checked this guide: the NiceHash steps come from NiceHash's own help pages, linked below, which we read on October 21, 2026. The pages show no publication date. We haven't tested them on a NiceHash account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Expect a short wallet lock
Plan the setup for a day when you don't need to move funds. NiceHash's security limits page says turning on 2FA puts a 24-hour lock on withdrawals to a new address, hashrate orders to a new pool, and API key management. If your balance is 1 BTC or more, the lock lasts 72 hours (NiceHash). Every later 2FA change triggers limits too, so it pays to set it up once and keep your backup codes safe.
Turn on 2FA with an authenticator app
NiceHash describes these steps (NiceHash):
- Sign in to NiceHash on the website and open your Settings page.
- Go to the Security section and click Enable 2-Factor Authentication.
- NiceHash shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Click Next.
- NiceHash now asks for two codes: the verification code it sent to your email, and the 6-digit code from Novaz. Enter both and click Verify.
- NiceHash shows your 2FA backup codes. Save them, then close the window.
Don't reload the page in the middle of setup. NiceHash makes a new QR code and a new email code each time the browser refreshes, and a code from an old QR code won't match the new email code (NiceHash).
The setup article only shows the QR code. NiceHash's recovery page does mention a 16-character secret key, which apps accept through an option such as "Enter a setup key" (NiceHash). If NiceHash gives you that key, you can add it in Novaz with +, then Enter key manually, typing it as the Setup key. See What is a 2FA setup key? Scanning is still the easier path.
Your backup codes
NiceHash's backup codes have 8 digits, and each one works only once. You type one in the same box as the 6-digit code from your app (NiceHash). The help pages don't say how many codes you get.
Unless you turn on iCloud backup or export a backup file in Novaz, the key lives only on your iPhone, so these codes are what gets you back in if that phone is gone and you have no current Novaz backup. Store them in a password manager or on paper, away from the phone. More in 2FA backup codes.
If NiceHash rejects your code
NiceHash's help names two causes (NiceHash):
- The phone's clock is off. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.
- The QR code and email code don't match during setup, usually after a refresh. If you haven't finished turning on 2FA, remove NiceHash from your app and start the setup again on the website. In Novaz, open the account and tap Remove account.
Other causes are in Authenticator code not working?
Changing phones
NiceHash doesn't have a separate article on moving to a new phone. Its recovery page describes the route: sign in, go to your account settings, turn off the current 2FA, then turn it on again with the new device and save the new backup codes (NiceHash). Keep the old phone until that's done.
With a Novaz iCloud backup or backup file, you can restore NiceHash on the new iPhone instead and the codes keep working. Without one, a new iPhone means adding NiceHash again. See How to transfer your authenticator app to a new iPhone. Turning 2FA off yourself triggers a 7-day lock on the same wallet actions listed above (NiceHash).
If you lose your authenticator
NiceHash's recovery page gives three routes, depending on what you kept (NiceHash):
- You saved the secret key or QR code. Add it to an authenticator app on your new phone and you're back.
- You have backup codes. Sign in with an unused one, turn off the old 2FA in your account settings, and set it up again with the new phone.
- You have neither. Email NiceHash support at 2fa@nicehash.com with the subject "2FA reset".
NiceHash doesn't say what proof of ownership it asks for or how long a reset takes. After a 2FA reset, its recovery page says withdrawals, API keys and parts of buying stay disabled for seven days. The security limits page lists a 3-day lock when an admin turns off 2FA, and says all pools are locked in that case, not only new ones (NiceHash). The two pages don't agree, so expect up to a week.
More in Lost the phone with your authenticator app?
