Nulab 2FA: how to set up an authenticator app for your Nulab Account
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Nulab makes Backlog, the project tracker, and Cacoo, the diagram tool. Both use the same Nulab Account, so two-factor authentication (2FA) is set up once, in your Nulab profile (Nulab). Nulab lets you get the second code from an authenticator app, a text message or email, or use a USB security key (Nulab). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Nulab steps come from Nulab's own support center, linked below, which we read on October 21, 2026, through the help center's public article feed. We haven't tested them on a Nulab account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Check which kind of account you have first
Nulab has two kinds of accounts, and only one of them uses this setting:
- Nulab Account (non-Managed): you sign in with your email address and password and manage the account yourself. This guide is for you.
- Managed Account: your organization runs it through Nulab Pass and you sign in with single sign-on. Nulab doesn't apply its own 2FA to these accounts. Your company sets up the second step in its identity provider instead (Nulab).
Turn on 2FA with an authenticator app
Nulab's help describes these steps (Nulab):
- Select your profile icon in the global navigation, then My profile.
- Open the Security tab at the top.
- In the menu on the left, select Two-factor authentication.
- Select Start two-factor authentication.
- Choose Use an app as your verification method.
- Nulab shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If you're on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the code Novaz shows and select Verify.
Nulab's article doesn't mention a text key you can type instead of scanning, so scan the QR code. If the screen does offer a key, tap +, then Enter key manually in Novaz, and paste it as the Setup key (What is a 2FA setup key?).
Make backup codes right away
Backup codes aren't created during setup. You make them yourself, on the same Two-factor authentication page: in the Backup section, select Generate backup codes. Nulab gives you 10 codes. Download or print them and keep them off your phone. Each code works once, and making a new set cancels the old one (Nulab). If you saved them and can't find the file later, Nulab says the default name is nulab-backup-codes.txt (Nulab).
Unless you keep a Novaz backup (iCloud backup or a backup file), the key exists only on your iPhone, so these codes are your way back in if that phone is gone. More in 2FA backup codes.
When Nulab asks for a code
Once 2FA is on, Nulab asks for your password and a code every time you log in (Nulab).
Two other things can turn it on or make it required:
- Passkeys. Adding a passkey turns 2FA on automatically. You can still sign in with your password, but then a code is required (Nulab).
- Backlog spaces on the Premium plan. An admin can require 2FA for every member under Space settings > Access control. Members then need Backlog-generated passwords for WebDAV file access, Git and Subversion over HTTPS, and RSS (Nulab).
If Nulab rejects your code
Nulab's troubleshooting page suggests a few checks (Nulab):
- Make sure the app entry matches the account you're signing in with.
- Use the code that's on screen now.
- Set your phone's time automatically. On iPhone: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.
Other causes are in Authenticator code not working?
Changing phones
Nulab doesn't describe moving the authenticator to a new phone. Its help only says to sign in with a backup method and reset your main method (Nulab), so keep the old phone until the new one works. With a Novaz iCloud backup or backup file you can restore Nulab on the new iPhone; without one, add Nulab again. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
If you set up a backup method, use it (Nulab):
- On the login screen, enter your email and select Next, then enter your password.
- Select Other ways to verify. If you don't see it, you have no backup method on the account.
- Choose the method, such as a backup code, enter the code and select Verify.
Once you're in, Nulab says to reset your main method in your 2FA settings, so set up Novaz again.
With no backup method, contact Nulab support through its contact page. Nulab says it replies within five business days and will need to verify your identity, but it doesn't say what proof it asks for. More in Lost the phone with your authenticator app?
Turning 2FA off
Go back to Two-factor authentication on the Security tab. In the Status section, select Disable two-factor authentication and confirm (Nulab). After removing it, open the Nulab entry in Novaz and tap Remove account.
