Onehub 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Onehub is a cloud service businesses use to store and share files with clients. Two-factor authentication (2FA) adds a 6-digit code to your password at sign-in. Any user can turn it on for themselves, and admins on the Advanced Edition and above can make it mandatory for everyone who works with their data (Onehub).
Onehub offers codes from an authenticator app or by text message, and doesn't offer email codes (Onehub). The authenticator app is the default choice. There's one catch: even if you pick the app, Onehub makes you verify a mobile number as a backup before 2FA is on. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Onehub steps come from Onehub's own help center, linked below, including its screenshots and the transcript of its setup video. We read them on October 21, 2026. The help center's web pages refused our plain requests, so we read the same articles through the help center's public article feed on its own domain. We haven't tested the steps on a Onehub account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Where the setting is
Onehub has two Security pages, and its main 2FA article blurs them. Its "Enabling" section points to Account & Billing > Security and the Enforce Two-Factor Authentication checkbox (Onehub), which is the admin switch for the whole account (Onehub).
For your own sign-in, use Security under your user Settings. That's where Onehub's setup video turns 2FA on and where the Disable button is (Onehub, Onehub). You reach it from your profile image in the top-right corner (Onehub).
Turn on 2FA with an authenticator app
- Click your profile image in the top-right corner and choose Settings.
- Click Security on the left and choose the option to enable two-factor authentication. The exact button label isn't shown in Onehub's current help.
- The Setup a Two-Factor App screen opens. In Novaz, tap +, then Scan QR code, and point the camera at the code on your computer screen. If you're on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If you can't scan it, Onehub shows a code to enter manually next to the QR code, split into groups of four characters. In Novaz, tap +, then Enter key manually, type a name in Service, and type that code as the Setup key. See What is a 2FA setup key?
- Type the 6-digit code from Novaz in the Code box and click Verify and Continue.
- On the next screen, enter your mobile number and click Send Verification Code.
- Type the 6-digit code Onehub texts you. That verifies your phone and turns 2FA on.
These steps follow Onehub's help and screenshots (Onehub, Onehub). The Authenticate via SMS button skips the app and uses text messages instead.
If your admin turns on enforcement
When an admin enforces 2FA, every user gets an email and has 24 hours to set it up, with a countdown banner and a Do this later option in the meantime. After that, every page leads to a Two-factor authentication required screen until you click Enable Now and finish the setup above (Onehub). New users invited to an enforcing account set it up while accepting the invitation (Onehub).
Signing in, and FTP
Once 2FA is on, Onehub asks for the code from your app each time you sign in, along with your email and password (Onehub).
FTP works differently. There's no separate code box, so you add the current 6-digit code to the end of your password in your FTP client. This only works with an authenticator app: text-message codes aren't supported for FTP (Onehub). If you transfer files over FTP, choose the app during setup.
If Onehub rejects your code
Onehub's help doesn't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. For FTP, put the code straight after the password, and use a fresh one. More causes are in Authenticator code not working?
If you lose your authenticator
Onehub's help doesn't mention backup codes. Its backup is the mobile number you verified during setup, which it asks for in case you lose access to your authenticator (Onehub). The help doesn't describe the sign-in screen for using it, so keep that number current. Text-message codes have their own weaknesses, covered in Authenticator app vs. SMS.
If you can't use the phone number either, Onehub's help doesn't describe a recovery process. Its setup video sends 2FA questions to Onehub support (Onehub). If your company enforces 2FA, your Onehub admin is a good first contact too. See also Lost the phone with your authenticator app?
Changing phones
Onehub doesn't document moving the authenticator. While you can still sign in, you can disable 2FA under Settings > Security and set it up again on the new iPhone. Or, with a Novaz iCloud backup or backup file, restore your accounts on the new iPhone and skip the reset. See How to transfer your authenticator app to a new iPhone.
Turning 2FA off
Go to your user Settings, choose Security and click Disable. If your admin enforces 2FA, that button isn't there (Onehub). In that case the disable-and-redo route for a new phone isn't open to you, and Onehub's help doesn't say what to do instead, so ask your admin or Onehub support before you give up the old iPhone.
