Paddle 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Paddle runs checkout, subscriptions and sales tax for companies that sell software, apps and digital products (Paddle). This guide covers the seller dashboard login. If you only bought something through Paddle, you don't have one: Paddle sends buyers to paddle.net (Paddle).
Two-factor authentication (2FA) on Paddle is optional and personal. Paddle's help names one method, an authenticator app such as 2FAS, Google Authenticator or Microsoft Authenticator, which each person turns on from their own User Settings page (Paddle). It mentions no text messages and no backup codes. If you lose your authenticator, an admin on your team resets it. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Paddle steps come from Paddle's own help center, developer docs and changelog, linked below, which we read on October 19, 2026. We haven't tested them on a Paddle account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Each person sets it up for themselves
Admins can't switch on 2FA for the whole team at once. What they can do is see who has it: the Team Members page shows a 2FA Status for each user (Paddle). Paddle's developer docs put that page under Business account > Team members (Paddle), and only the Admin role can open it (Paddle).
Turn on 2FA with an authenticator app
- Sign in to your Paddle dashboard. Live accounts are at vendors.paddle.com (Paddle).
- Open your User Settings page and start the two-factor setup. Paddle's help doesn't give a menu path or describe the screens that follow, so the next steps are general.
- If Paddle shows a QR code, in Novaz tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- If Paddle shows a text key, in Novaz tap +, then Enter key manually. Type Paddle as the Service and the key as the Setup key. See What is a 2FA setup key?
- If Paddle asks for a code to confirm, type the one Novaz shows.
Paddle's help doesn't say whether it offers a text key, how many digits its codes have, or how often they change. A QR code passes those settings to your app, so scan it when you can. A key typed by hand in Novaz always gives 6-digit codes every 30 seconds.
Sandbox accounts: Paddle's sandbox, at sandbox-vendors.paddle.com, is a separate account with its own dashboard and credentials (Paddle). The 2FA help page doesn't mention it. If you use both, check User Settings in each and name the two Novaz entries apart, such as Paddle and Paddle sandbox.
Signing in afterwards
Once 2FA is on, Paddle asks for a code from your app every time you sign in, after your username and password (Paddle). Its help doesn't mention a way to remember a trusted device.
No backup codes in Paddle's help
Paddle's help mentions no backup or recovery codes. Its safety net is an admin on your account. If your iPhone is gone and you have no Novaz backup (iCloud backup or a backup file), a reset is your way back in. If you're the only admin, consider adding a second one you trust: an admin can reset your 2FA right away, and Paddle doesn't say how long Support takes.
If Paddle rejects your code
Paddle's help doesn't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. Other causes are in Authenticator code not working?
If you lose your authenticator
It depends on your role (Paddle):
- You're a team member: ask an admin on your Paddle account to reset your 2FA.
- You're an admin and there's another admin: ask them to reset yours.
- You're the only admin, or no other admin can help: email Paddle Support at sellers@paddle.com. Support restores access once it has verified your identity, but the help page doesn't say what proof it wants or how long it takes. Write from an email address linked to your Paddle account (Paddle).
To reset someone's 2FA, an admin opens the Team Members page, finds the person, clicks the three dots at the right of their row, and chooses Reset 2FA (Paddle). Admins have been able to do this since April 29, 2026. Before that, it took a request to Paddle Support (Paddle).
More in Lost the phone with your authenticator app?
Changing phones or turning 2FA off
Paddle's help doesn't describe moving 2FA to a new phone yourself, or turning it off yourself. Its changelog names a new device as one of the reasons for an admin reset (Paddle). Keep the old phone until the reset is done, then set up 2FA with the new phone from User Settings. If you use Novaz's iCloud backup or keep a backup file, you can restore your accounts on the new iPhone and the Paddle codes keep working without a reset. See How to transfer your authenticator app to a new iPhone.
