Skip to content
Novaz AuthenticatorGET

Porkbun 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. Backup codes
  3. Signing in afterwards
  4. If Porkbun rejects your code
  5. Changing phones or turning it off
  6. If you lose your authenticator
  7. Official Porkbun help

Porkbun is a domain registrar, and anyone who gets into your account can repoint your domains or spend with your saved card. Porkbun's two-factor authentication (2FA) is optional and comes in three forms: a security key or passkey, an authenticator app, and emailed codes, still marked beta. Porkbun ranks the key strongest and email weakest (Porkbun), while its settings call app codes "the most widely supported second factor, and the one we recommend" (Porkbun).

It's required in one case: to add an Authorized User, both accounts need an app or a security key, not email codes (Porkbun). Passwordless sign-in works only with a security key, not an app (Porkbun). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Porkbun steps come from Porkbun's own Knowledge Base and its Security and Phishing page, linked below, including the screenshots in the setup article, which we read on October 20, 2026. We haven't tested them on a Porkbun account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

These steps follow Porkbun's newest setup article, from October 2026 (Porkbun). Older articles call the settings area Account Security Settings, so labels may differ.

  1. Sign in at porkbun.com, click ACCOUNT at the top right, and choose Settings / Billing.
  2. Scroll to Security and sign-in, or click it in the menu on the left.
  3. Click the switch next to Two-factor authentication with an app.
  4. Your browser asks you to confirm that the phone number, email address and mailing address under Account Details are correct, since Porkbun relies on them if you're locked out. Click OK, or Cancel to fix them first.
  5. A TWO FACTOR AUTHENTICATION window shows a QR code with a Key under it. In Novaz, tap +, then Scan QR code. If Porkbun is open on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
  6. To type the key instead, tap +, then Enter key manually, and enter Porkbun as the Service and the key as the Setup key. See What is a 2FA setup key?
  7. Type the six-digit code from Novaz into Verification Code and click Submit.
  8. A NEW TWO FACTOR BACKUP CODES window lists your backup codes. Save them, then click Close.

The switch turns green. Porkbun may sign you out straight away, and from then on every sign-in asks for a code.

Porkbun doesn't say how often its codes change. Scan the QR code if you can: a key typed into Novaz always gives 30-second codes.

Backup codes

Each backup code works once, and the window warns that a new list replaces any earlier one (Porkbun). Registering a security key also produces a list (Porkbun), so keep only the newest. Porkbun's help doesn't say how to request a fresh list otherwise.

Without a Novaz backup, the keys are only on your iPhone, so store these codes in a password manager or on paper. See 2FA backup codes.

Signing in afterwards

The code box at sign-in takes a code from your app or a backup code, with a use another method link under it (Porkbun). Porkbun says it never asks for an authenticator code, so anyone who does probably has your password already (Porkbun).

Your API keys keep working with 2FA on (Porkbun).

If Porkbun rejects your code

Porkbun's help has no advice on rejected codes. Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones or turning it off

Porkbun's help covers neither. Its screenshot of the active setting shows an Authenticator key area with Show QR code and key and Generate a new key buttons, but the article doesn't explain them (Porkbun). Make any change while the old phone still gives codes, and keep it until the new one has worked.

If you restore Novaz from iCloud backup or a backup file, Porkbun comes over with your other accounts; without one, a new phone means adding Porkbun again. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Try a backup code first. Without one, Porkbun's self-service recovery checks your email and then your phone (Porkbun, Porkbun):

  1. On the sign-in page, enter your username or email, then click Forgotten password, 2FA, or security key under Login.
  2. In Account Recovery, click send email code and enter the code from your primary email.
  3. For the second check, choose Phone, then send phone code, and enter the code texted to the number on your account.
  4. Click Continue, then set up 2FA again from Settings / Billing.

Both codes expire after 30 minutes, which is why the setup pop-up asks you to check your contact details.

If that fails, contact Porkbun support. Phone (1.855.767.5286) and live chat run 9 AM to 5 PM Pacific time every day, and support@porkbun.com is answered around the clock (Porkbun). During recovery, support may ask you to confirm a code sent to your phone, but only in a call or ticket you started (Porkbun). Porkbun doesn't say what other proof it needs or how long recovery takes. More in Lost the phone with your authenticator app?

Official Porkbun help

More guides: Domain registrars