Qantas 2FA: how to set up an authenticator app for Frequent Flyer

Your Qantas Frequent Flyer account holds your Qantas Points, your bookings and your payment details. You sign in with your membership number, last name and PIN, and Qantas then checks it's really you with a verification code. By default that code comes by text message or email. You can also link a third-party authenticator app, so you don't have to wait for a text or an email (Qantas). Qantas also supports passkeys, and it has security questions as a fallback.

This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way. Qantas says that any app from the App Store or Google Play will do (Qantas).

How we checked this guide: the Qantas steps come from Qantas's own Frequent Flyer help pages, linked below, which we read on October 21, 2026. We haven't tested them on a Qantas account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Link an authenticator app

You'll need to pass a code check before you can open the setting. Qantas puts everything under Personal information behind 2FA, so expect a text or email code first (Qantas). Make sure the mobile number or email address in your profile still works before you start.

1. Sign in on the Qantas website or app and go to My account > My profile > Personal information > Authenticator app.
2. Enter the text or email code Qantas sends you, so it lets you into Personal information.
3. Qantas shows a QR code and a text code. In Novaz, tap +, then Scan QR code, and point the camera at the QR code. If it's on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. To use the text code instead, tap + in Novaz, then Enter key manually. Type "Qantas" as the Service, and paste the text code into Setup key. Qantas says its codes are six digits and change every 30 seconds, which matches what Novaz uses for a typed key. More in What is a 2FA setup key?
5. Type the six-digit code from Novaz into the field on the Qantas page and continue.

Once that works, the app is linked. Qantas's older security FAQ describes the same path with the labels My profile > Personal information > Authenticator App, so the capitalization may differ on your screen (Qantas).

When Qantas asks for a code

Qantas doesn't ask on every sign-in. According to its help page, you'll be asked to pass 2FA when (Qantas):

• you sign in on a new device, or one Qantas doesn't recognize, for example after you've cleared your browser's cookies or cache;
• you open your personal information or payment details;
• Qantas wants an extra check, or has noticed unusual activity on the account.

No backup codes, but security questions

Qantas's pages don't mention backup or recovery codes. Its fallbacks are a text or email code to the details in your profile, and security questions. If you can't get a code, choose verify another way at sign-in, and Qantas takes you through your security questions instead (Qantas).

Unless you back up Novaz, that makes your profile details and your security answers the real backup. Keep your phone number and email current, and make sure you remember your answers.

If Qantas rejects your code

You get three tries in all. After the third wrong code, Qantas moves you to security questions. You'll need to answer the one about your mother's maiden name and at least two others correctly, then press verify (Qantas).

Before you use up your tries, check the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

Qantas points out that some authenticator apps sync to the cloud and are easy to move to a new device (Qantas). Novaz can be, if you turn on iCloud backup or keep a backup file: restore it on the new iPhone and the codes keep working. Without one, unlink the app (below) while you still have the old phone, then link it again from the new one. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Choose verify another way at sign-in and answer your security questions, or use a text or email code if one is offered. Once you're in, unlink the old app and link a new one.

If you're locked out completely, Qantas says to call the Frequent Flyer Service Centre on +61 2 9433 2329, a number that works worldwide (Qantas). Its pages don't say what proof the team asks for or how long a recovery takes. If you get a code you didn't ask for, Qantas asks you to call 13 11 31 so it can check the account. More in Lost the phone with your authenticator app?

Unlinking the app

Go to My account > My Profile > Personal information > Authenticator app, pass the 2FA check, select unlink, and follow the steps (Qantas). After that, Qantas falls back to a text message, an email where available, or your security questions if you've set them up. In Novaz, open the Qantas entry and tap Remove account.

Official Qantas help

• Authenticator apps
• Member account security