Skip to content
Novaz AuthenticatorGET

Passwarden 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Before you start
  2. Turn on 2FA with an authenticator app
  3. Backup codes
  4. When you'll need a code
  5. If Passwarden rejects your code
  6. Changing phones or losing your authenticator
  7. Official Passwarden and KeepSolid help

Passwarden is KeepSolid's password manager, and you sign in to it with a KeepSolid ID: the same account that works for VPN Unlimited, SmartDNS and KeepSolid's other apps (KeepSolid). So the two-factor switch isn't in Passwarden's settings. It sits in the KeepSolid User Office on the web, and it protects every KeepSolid app you use with that ID (Passwarden).

Two-factor authentication (2FA) is optional. There are two methods: a code sent to your email, and a code from an authenticator app, and you can use them together (Passwarden). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Passwarden steps come from Passwarden's and KeepSolid's own help pages, linked below, which we read on October 21, 2026. We haven't tested them on a Passwarden account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start

  • Social sign-in users: if you signed up with Apple, Google or Facebook, you need to create a KeepSolid ID password first (KeepSolid). The User Office does this under Profile with Set password (Passwarden).
  • Expect to sign in again everywhere. Turning on 2FA signs your KeepSolid ID out on all your devices (Passwarden).
  • 2FA isn't your Master password. Passwarden's vault still opens with your Master password. The Recovery Key that Passwarden gives you is for a forgotten Master password, not for a lost authenticator (Passwarden).

Turn on 2FA with an authenticator app

The newest KeepSolid manual, written for the current User Office, gives these steps (KeepSolid):

  1. Sign in to the KeepSolid User Office at my.keepsolid.com with your KeepSolid ID.
  2. Open Settings in the menu on the left, then Security Settings.
  3. Turn on Require Password. This switches on email codes first.
  4. Enter the 8-digit code KeepSolid emails you and click Verify.
  5. Click Download your backup codes and keep the file somewhere safe.
  6. In the Two-Factor Authentication section, turn on Authenticator App. A QR code appears.
  7. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the User Office is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
  8. Click Next, type the 6-digit code from Novaz, and click Verify.

Neither manual mentions a text key. If the User Office shows one, tap + in Novaz, then Enter key manually, and paste it as the Setup key.

Passwarden's own manual shows an older User Office, reached through My Account, Manage and Profile Settings, with Confirm instead of Verify and the backup codes offered at the end (Passwarden). Your screen may follow either version.

Backup codes

Your backup codes are the one documented way back in if you lose the authenticator. If you use them up or misplace them, Regenerate backup codes makes a new set and cancels the old one. KeepSolid's manual is blunt about the risk: "Losing them may result in a permanent account lockout" (KeepSolid).

If you haven't made a Novaz backup, its keys exist only on your iPhone, so these codes are your way back in. Keep them outside your Passwarden vault as well, on paper or in a second password manager, because the vault sits behind the very sign-in you'd be locked out of. More in 2FA backup codes.

When you'll need a code

Passwarden says you'll be asked for a code when you sign in on a new device (Passwarden). At that point you can pick the email code, the authenticator code or a backup code (KeepSolid).

Older versions of some KeepSolid apps, such as VPN Unlimited, have no 2FA screen: there you type your password, then &ga, then the code, in the password field. Passwarden isn't on that list (KeepSolid).

If Passwarden rejects your code

KeepSolid's pages don't cover rejected codes. Make sure you're not mixing up codes: the setup email code has 8 digits, Novaz codes have 6. Then check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones or losing your authenticator

KeepSolid doesn't document how to move the authenticator to a new phone, or how to turn it off again. With Novaz, iCloud backup or a backup file lets you restore your accounts on the new iPhone (see moving to a new iPhone). Either way, keep the old phone and your backup codes until you've signed in with the new setup.

If the phone is gone, sign in with a backup code, or choose the email code if your email option is still on. The pages don't describe a support process for resetting 2FA or what proof KeepSolid would ask for. The general support address listed on the manual is support@keepsolid.com (Passwarden). See also Lost the phone with your authenticator app?

Official Passwarden and KeepSolid help

More guides: Security, identity and VPN