put.io 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your put.io account holds the files put.io fetches for you, including torrents, so you can stream or download them later. Two-factor authentication (2FA) is optional. put.io turns it on with a single switch in your account settings, and the second step is a code from an authenticator app (put.io). The part most people trip over comes after: once 2FA is on, FTP and WebDAV clients need an app-specific password instead of your usual one (put.io). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the put.io steps come from put.io's own help center, linked below, which we read on October 21, 2026. We haven't tested them on a put.io account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
put.io's 2FA article is short, last updated in October 2023, and covers only where the switch is (put.io):
- Sign in on the web and open your Account page (app.put.io/account).
- Under Security, turn on the Two-factor authentication toggle.
- Add put.io to Novaz. If put.io shows a QR code, tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- If put.io offers a text key instead, tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
- Finish the setup with the code Novaz shows, if put.io asks for one.
- Save the recovery codes put.io gives you (next section).
put.io's help doesn't describe the setup screen itself: it doesn't say whether you get a QR code, a key or both, what the key is called, or whether you confirm with a code. Follow what the screen shows. When a QR code is offered, scanning it is the safer choice, because it passes the code settings to Novaz.
Save your recovery codes
After you turn 2FA on, put.io gives you recovery codes. Its help says they matter if you ever lose access to your authenticator app, and asks you plainly: "Don't lose these codes" (put.io).
Unless you back up Novaz, its keys exist only on your iPhone, so store the codes somewhere off the phone, such as a password manager or a printed sheet. put.io's help doesn't say how many codes you get, whether each works once, or how to make new ones. See 2FA backup codes.
FTP, WebDAV and other apps
put.io's help pages disagree here, so go by the newer ones.
- The 2023 2FA article says to sign in to FTP or WebDAV with your password followed directly by the authenticator code, with no space (put.io).
- The FTP and WebDAV article, updated in June 2026, says that with 2FA on you need an app-specific password for those connections (put.io). The app-specific password article, from March 2026, adds that you type only that password and don't add a code to it (put.io).
To make one, go to Account, then App-specific Passwords, click Create One, name it, and click Continue. put.io shows the password only once, so copy it right away (put.io).
put.io's help doesn't say how its own TV, phone or streaming apps handle 2FA at sign-in.
If put.io rejects your code
put.io's help has no advice for rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. For FTP or WebDAV, a failed sign-in more likely means you need an app-specific password, as above. More causes are in Authenticator code not working?
Changing phones or losing your authenticator
put.io doesn't document moving 2FA to a new phone. With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone. Without one, while you still have the old phone, sign in and check your Security settings on the Account page for a way to set 2FA up again. See How to transfer your authenticator app to a new iPhone.
If the phone is gone, use one of your recovery codes. Without them, put.io's only documented route is its support team: the chat bubble on its site or support@put.io (put.io). put.io's help doesn't say what proof support asks for or how long it takes. See Lost the phone with your authenticator app?
put.io's help also doesn't describe turning 2FA off.
