Raindrop.io 2FA: how to set up an authenticator app

Raindrop.io is a bookmark manager: it keeps your saved links, highlights, files and collections in sync across the web app, the browser extension and the mobile and desktop apps. Two-factor authentication (2FA) is optional. When you turn it on, there's only one method: a one-time code from an authenticator app. Raindrop.io doesn't offer text-message codes, and its help says physical security keys aren't supported yet (Raindrop.io).

The most important thing to know before you start: Raindrop.io's recovery codes are your only way back in. If you lose both your authenticator and those codes, Raindrop.io says "there is no way to regain access to the account" (Raindrop.io). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Raindrop.io steps come from Raindrop.io's own help center, linked below, which we read on October 21, 2026. We read the help center's plain-text versions of its pages. We haven't tested the steps on a Raindrop.io account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

The setting has its own page in Raindrop.io's web app (Raindrop.io):

1. Sign in to Raindrop.io and open the 2FA settings at app.raindrop.io/settings/tfa.
2. Click Add.
3. Raindrop.io gives you a secret code that you can scan or copy. To scan it, in Novaz, tap +, then Scan QR code, and point the camera at the screen. If you're setting this up on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. If you'd rather type it, copy the secret code instead. In Novaz, tap +, then Enter key manually. Type Raindrop.io in Service, your email in Account if you like, and paste the code into Setup key. See What is a 2FA setup key?
5. Type the six-digit code Novaz shows and click Continue.
6. Save the recovery codes Raindrop.io gives you. Don't skip this step (see below).

Raindrop.io's help doesn't say how often its codes change. Scanning the QR code is the safer choice, because the QR code tells Novaz the code settings. A key typed by hand always gets 30-second codes.

Turning 2FA on signs you out of every other session, so expect to sign in again on your other computers, the browser extension and the mobile apps (Raindrop.io).

Recovery codes are Raindrop.io's only fallback

Raindrop.io's help describes no support route for a lost authenticator. Its FAQ says that if you lose the app and the recovery codes, the account can't be recovered (Raindrop.io). That makes the recovery codes far more important here than on most services.

Unless you turn on iCloud backup or export a backup file, Novaz keeps its keys only on your iPhone. Even with a Novaz backup, save those codes, since they still work if the phone and the backup both let you down. Keep them somewhere that isn't your phone: a password manager on another device, or a printed copy at home. The help doesn't say how many codes you get or whether you can make a new set later. See 2FA backup codes.

When Raindrop.io asks for a code

Raindrop.io's help says the code comes after your password when you log in (Raindrop.io). It doesn't mention trusted devices or how long a sign-in lasts. It also doesn't say whether the code step applies when you sign in with Google or Apple, which Raindrop.io also supports.

If Raindrop.io rejects your code

Raindrop.io's help doesn't cover rejected codes. The most common cause is a wrong clock on the phone. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz shows a warning when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

If the problem is with signing in itself, not the code, Raindrop.io's login troubleshooting page covers VPNs, ad blockers and blocked cookies, and gives info@raindrop.io as the contact (Raindrop.io).

Changing phones

Raindrop.io's help doesn't describe moving 2FA to a new phone. Its documented steps let you do it yourself while you still have the old phone: turn 2FA off with a code from the old phone, then turn it on again and scan the new QR code on the new one. If you have a Novaz iCloud backup or backup file, you can skip that and restore your accounts on the new iPhone instead; without one, Raindrop.io's off-and-on route is the way to go. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

You need a recovery code. Raindrop.io lets you use one at the sign-in screen to switch 2FA off (Raindrop.io):

1. Start signing in at app.raindrop.io/account.
2. When Raindrop.io asks for the authentication code, click Disable.
3. Enter one of your recovery codes and confirm.

Once you're in, turn 2FA on again with your new phone and save the new recovery codes. Without a recovery code, the help offers no other way in. More in Lost the phone with your authenticator app?

Turning 2FA off

Go to app.raindrop.io/settings/tfa and click Disable. Then enter a code from your authenticator app or a recovery code (Raindrop.io). Like turning it on, this ends all your other sessions. After that, you can remove Raindrop.io from Novaz: open the account and tap Remove account.

Official Raindrop.io help

• Authentication
• Security & privacy
• Can't log in