Openprovider 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Openprovider is a domain registration platform for resellers, and its web control panel is where you and your colleagues manage the account. Two-factor authentication (2FA) there isn't optional anymore. Openprovider made it mandatory for all accounts from October 28, 2025 (Openprovider). The only second step its help describes is a time-based code from an authenticator app, with backup codes as the fallback. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app that makes standard time-based codes works the same way.
How we checked this guide: the Openprovider steps come from Openprovider's own help center, linked below, which we read on October 22, 2026. The article pages refused plain automated requests, so we read the same articles, and their screenshots, through the help center's public article feed. We haven't tested them on an Openprovider account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Each user sets up their own
Openprovider's control panel can have several users under one reseller account, and 2FA belongs to a user, not to the account. When you turn it on, you're setting it up for the user you're signed in as (Openprovider). Colleagues who sign in with their own usernames each need their own authenticator.
For a login that several people share, Openprovider recommends separate users, or else a shared password manager such as Bitwarden to hold the code. Novaz is built for one person's iPhone, not a shared vault, so use Novaz only for a login that is yours alone.
Turn on 2FA with an authenticator app
- Sign in to the Openprovider control panel and go to Account > Security > Two-factor authentication (Openprovider).
- If 2FA isn't on yet, the page tells you so. Select Enable.
- Openprovider shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If you're looking at the control panel on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Follow the remaining prompts on the screen. Openprovider's current article doesn't show them; an older one says that after scanning, you confirm the entry (Openprovider).
- The Backup codes screen appears. Select Download to save the list, then Done.
Openprovider's help doesn't describe a text key you can type instead of scanning, and doesn't say how many digits its codes have. If the setup screen does offer a key, you can add it in Novaz with + > Enter key manually, as the Setup key. See What is a 2FA setup key?
An older Openprovider article describes the same place differently: an Account tab at the bottom left, a Security link, then a Two Factor Authentication tab (Openprovider). The newer 2FA article's labels are the ones above.
Which authenticator apps work
Openprovider gives Google Authenticator, Microsoft Authenticator and Authy as examples. Its account security article, updated in November 2025, warns against Cisco Duo Mobile, which it says doesn't fully follow the standard and causes frequent sign-in mismatches (Openprovider). An earlier newsletter still listed Duo; the newer article wins.
Save the backup codes on the spot
The Backup codes screen is the only time Openprovider shows them. Its screenshot shows ten codes, each good for one sign-in (Openprovider). If you skip the download, the only way to get a new set is to turn 2FA off and on again (Openprovider).
Keep them even if you back up Novaz: they're the way in if your phone is gone and your Novaz backup is missing or out of date. Keep the file somewhere other than your phone. More in 2FA backup codes.
When Openprovider asks for a code
You need a code when you sign in to the control panel on the website. Openprovider says 2FA doesn't apply to API connections, so an API user or a WHMCS module that signs in with the same username keeps working without codes (Openprovider). Its help doesn't mention a way to remember a trusted browser.
If Openprovider rejects your code
Beyond the Duo warning, Openprovider gives no advice for rejected codes. The usual culprit is the iPhone's clock: go to Settings > General > Date & Time and turn on Set Automatically. Novaz shows a warning when the clock is off by 15 seconds or more. Other causes are covered in Authenticator code not working?
Moving to a new iPhone
Openprovider doesn't describe a phone change, but it does mention turning 2FA off and on again, which runs the QR code step a second time. Do that while you can still sign in, scan with the new phone, and save the new backup codes. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your backup codes. Without them, Openprovider's newest article sends you to the admin user of your reseller account, who emails Openprovider support from the account's registered address to ask for a reset. Support checks each request by hand, which Openprovider says may take a few hours (Openprovider). An older article gives the address as support@openprovider.com and asks for your username or reseller ID and the reason you lost access (Openprovider).
Expect an identity check. For a request to disable 2FA, Openprovider's verification rules ask that the ticket come from the email address of the user concerned, with a copy of your ID, a selfie holding the ID, and a selfie holding a handwritten note that reads "I want to disable the 2FA. Today is [date of today]" (Openprovider). The ID must be valid and readable, and a passport is required if you live outside the account's country.
More in Lost the phone with your authenticator app?
