Raygun 2FA: how to set up an authenticator app

Raygun is the error, crash and performance monitoring service developers use to watch their web and mobile apps. Its two-factor authentication (2FA) works with an authenticator app, and Raygun's security page says the codes are time-based (TOTP) (Raygun). What stands out is the fallback: Raygun's documentation doesn't mention backup codes at all. Its answer to a lost phone is SMS authentication, which you can only add once the authenticator app is set up (Raygun). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Raygun steps come from Raygun's own documentation, linked below, which we read on October 21, 2026. Raygun's 2FA page is short and has no screenshots of the setup screens, so we haven't been able to confirm every label, and we haven't tested the steps on a Raygun account. The Novaz steps are checked against the app, version 1.0.5.

Who has to use it

For a single account, 2FA is optional. A plan can require it for everyone, but there's no switch for that in the app: Raygun Support turns it on for you, and only for plans that have been converted to an organization (Raygun). Plan owners do that conversion under Convert to Organization at the bottom of the plan settings (Raygun).

Single sign-on doesn't skip the code: with 2FA on, you still enter one after your identity provider lets you through (Raygun). Its page on the older GitHub and Google sign-in for legacy accounts doesn't say either way (Raygun).

Turn on 2FA with an authenticator app

Raygun describes these steps (Raygun):

1. Sign in to Raygun, click your name in the top-right corner, and choose My settings.
2. Click Enable Two Factor Authentication.
3. Raygun asks which authenticator app you'll use and lists a few. Novaz may not be listed, but any app that makes standard time-based codes works. Pick one and continue.
4. The next page shows a QR code, with the option to enter the code by hand instead. In Novaz, tap +, then Scan QR code, and point the camera at it. If Raygun is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
5. To type the key instead, tap +, then Enter key manually in Novaz, and paste Raygun's key into Setup key. Raygun doesn't say how long its codes are or how often they change, so scanning is the safer route: the QR code carries those settings, while a typed key always gives 6-digit codes every 30 seconds. See What is a 2FA setup key?
6. Back in Raygun, enter your password and the current code from Novaz to confirm. 2FA is now on.

Add SMS as your fallback

Raygun recommends setting up SMS authentication as well, in case you lose the authenticator app (Raygun). With Novaz this matters unless you keep an iCloud backup or a backup file, because without one the keys exist only on your iPhone, and a text message is the only documented way back in without contacting Raygun.

Before you start, save a phone number in the Profile settings section of My settings and click Save Changes (Raygun). Then:

1. In My settings, click Enable SMS Authentication.
2. Click I'm ready, let's set it up.
3. Click Send SMS code. Raygun says the code should arrive within 30 seconds.
4. When the text arrives, enter the code. Raygun's page words this step as entering your credentials, so it may also ask for your password.
5. Click I want to enable SMS authentication.

Once SMS authentication is on, you can't change the phone number on your account. To switch numbers, turn SMS authentication off, update the number, and set it up again (Raygun). Keep in mind that a text message is a weaker factor than an app; see authenticator app vs SMS.

If Raygun rejects your code

Raygun's documentation has no advice on rejected codes. The most common cause is a phone clock that has drifted. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

Raygun doesn't describe moving 2FA to a new phone, and its documentation doesn't explain how to turn 2FA off. If you keep a Novaz iCloud backup or backup file, restore it on the new iPhone and Raygun's codes come with it. Otherwise you'll set Raygun up again on the new one. Either way, keep the old phone until the new one works, and set up SMS authentication first as a safety net. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

If you set up SMS authentication, use the code Raygun texts to your phone. Raygun calls SMS a fallback for exactly this case (Raygun).

Without SMS, Raygun's documentation doesn't describe a recovery process, what proof it asks for, or how long it takes. The routes it gives for help are Contact Raygun in the app's sidebar, which you can't reach while locked out, and the public contact page (Raygun, Raygun). It's sensible to write from the email address on your account, though Raygun doesn't say this is required. If your team uses SAML SSO and you're locked out, Raygun's SSO page points to the same contact page (Raygun).

More in Lost the phone with your authenticator app?

Official Raygun help

• Two factor authentication (2FA)
• My Settings
• Single Sign On - SAML
• Single Sign On - Basic
• Managing Organizations
• Ways to get help
• Raygun security