Panda Security 2FA: how to set up an authenticator app for your Panda Account

Panda Security, now a WatchGuard brand, uses one sign-in, the Panda Account, for two groups. Home users open My Panda to download Panda Dome and manage licenses. IT administrators use it to reach Panda Cloud and business consoles such as Panda Adaptive Defense 360 (Panda Security, Panda Security).

Two-factor authentication (2FA) is optional (Panda Security), unless an administrator makes it mandatory for a business console. The only second factor Panda documents is an authenticator app code. Its help names WatchGuard AuthPoint, its parent company's app, but accepts a similar one. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Panda Security steps come from Panda's own support pages, its Panda Account 2-Step Verification help and its Panda Adaptive Defense 360 administrator help, linked below, which we read on October 20, 2026. We haven't tested them on a Panda Account, so a label may differ slightly. Panda's pages also mix the names "2-Step Verification" and "two-factor authentication". The Novaz steps are checked against the app, version 1.0.5.

What this guide doesn't cover

• The WatchGuard Portal. If you open Panda consoles from the WatchGuard Portal, MFA is set up in your WatchGuard account, and Panda's help describes it only with AuthPoint push approvals (Panda Security). Novaz doesn't do push.
• Panda Dome Password Manager. It has its own 2FA option, which Panda's support page lists but doesn't explain (Panda Security).
• The anti-tamper QR code. Adaptive Defense 360 can require an authenticator code before anyone uninstalls or reconfigures its agent. That protects computers, not your sign-in (Panda Security).

Turn on 2FA in My Panda

Panda's current support page puts the setting under Account Management. The detailed steps come from older help, so screens may differ.

1. Sign in to My Panda at my.pandasecurity.com (Panda Security).
2. Click the icon at the top right and select Account Management (Panda Security).
3. In the two-factor authentication setting, click Enable (Panda Security).
4. Panda shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If My Panda is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Type the code from Novaz and click Verify.

Panda's help doesn't mention a text version of the key, so plan to scan the QR code.

Turn on 2FA for a Panda Cloud console

The Adaptive Defense 360 help, updated in 2026, gives these steps for Panda Cloud sign-ins (Panda Security). Partner Center works the same way (Panda Security).

1. In the management console, click the icon in the upper-right corner and select Set up my profile. The Panda Account page opens.
2. In the side menu, select Login. In the Two-factor authentication section, click Enable. The Synchronization using an authentication app dialog shows a QR code.
3. Panda's instructions continue with AuthPoint's own buttons. In Novaz, tap +, then Scan QR code.
4. Type the code from Novaz in the console and click Verify. When Two-factor authentication is enabled appears, click OK.

To make 2FA mandatory, an administrator with the Manage users and roles permission and visibility of the whole network opens Settings, then the Security tab, and selects Require users to have two-factor authentication enabled to access this account. The console warns that administrator if their own account doesn't have 2FA yet.

Signing in afterwards

Panda asks for a code at every sign-in, after your email address and password (Panda Security). On Panda Cloud, that's a second screen after Log in (Panda Security). Each code works only once (Panda Security).

No backup codes

None of Panda's pages mention backup codes or a fallback method. With Novaz, that matters if you haven't made a backup: the key then lives only on your iPhone. If that phone is lost and you have no iCloud backup or backup file, Panda's pages leave only its support team.

If Panda rejects your code

Panda's only advice is timing: codes last 30 seconds, so enter one before it's replaced (Panda Security). If a fresh code still fails, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Panda doesn't describe a phone switch, but its help says you can turn 2FA off and back on with Enable (Panda Security). Do that while the old iPhone still works, and scan the new QR code with Novaz on the new iPhone. If you use Novaz's iCloud backup or keep a backup file, you can restore your accounts on the new iPhone instead and the Panda codes keep working. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Panda doesn't publish a recovery process, and its administrator help doesn't describe resetting another user's 2FA. Your route is Panda's technical support form, which covers Panda Dome and the business products. Pick your product and an incident type, such as Customer Service, and explain the problem. The form also has fields for your email address and client number (Panda Security). Panda doesn't say what proof it accepts or how long a reset takes. More in Lost the phone with your authenticator app?

Turning 2FA off

Sign in with your password and a code, open your Panda Account, click Disable, and answer the dialog (Panda Security). Afterwards, open Panda in Novaz and tap Remove account.

Official Panda Security help

• How to manage your product from your Panda Account
• How to renew your antivirus
• How does 2-Step Verification work?
• Signing in to your Web console using 2-Step Verification
• Verification code features
• Disabling 2-Step Verification
• Managing user accounts (Panda Adaptive Defense 360)
• User management (Partner Center)
• Configuring security against protection tampering
• Dome Passwords Technical Support
• Contact Technical Support