RealVNC 2FA: how to set up an authenticator app

Your RealVNC account is the one behind RealVNC Connect: it signs you in to the RealVNC Connect Portal, licenses RealVNC Server, and lets RealVNC Viewer find your computers and sync your address book (RealVNC). RealVNC calls its two-factor authentication "2-step verification", and the only method it describes is a code from an authenticator (TOTP) app. It's optional unless an Enterprise team owner requires it. If you're on RealVNC Connect Lite, note that RealVNC says it can't help you back in if you lose both your phone and your backup codes. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the RealVNC steps come from RealVNC's own help center, linked below, which we read on October 21, 2026. The help center's web pages blocked automated access, so we read the same articles through its public article feed on help.realvnc.com. We haven't tested the steps on a RealVNC account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2-step verification with an authenticator app

These steps follow RealVNC's setup article (RealVNC):

1. Sign in to the RealVNC Connect Portal at manage.realvnc.com.
2. Click the profile (person) icon at the top right, then Security.
3. Click Enable 2-step verification.
4. RealVNC shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If you're on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Confirm your RealVNC account password, type the code Novaz shows, and click Enable.
6. Save the backup codes RealVNC shows next.

RealVNC's article doesn't mention a text key to type instead, so plan on scanning.

Save the backup codes

The backup codes appear once, right after you turn 2-step verification on. Each one works a single time, and RealVNC warns that without them you may not be able to sign in again (RealVNC). Save them even if you back up Novaz. Without an iCloud backup or a backup file, Novaz's keys exist only on your iPhone, and these codes are your way back in. Keep them in a password manager or on paper, away from the phone. More in 2FA backup codes.

Another RealVNC article also suggests keeping a screenshot of the QR code in case you misplace your phone (RealVNC). If you do, treat that image like a password: anyone who has it can make your codes.

When RealVNC asks for a code

Once it's on, RealVNC asks for a code every time you sign in to the Connect Portal, to RealVNC Server when you license it at the computer, and to RealVNC Viewer (RealVNC).

In return, you stop getting the email that asks you to approve each sign-in from a new device. RealVNC presents 2-step verification as the way to switch those emails off (RealVNC).

This covers your RealVNC account only. A second factor for connections to a RealVNC Server computer, such as Duo or RADIUS, is set up separately on RealVNC Server (RealVNC, RealVNC).

Teams and single sign-on

• Enterprise teams: the team owner can require 2-step verification for every member, including themselves (RealVNC). Nobody can turn it off for another member.
• SSO teams: RealVNC's own 2-step verification doesn't work with SSO accounts; your identity provider handles it (RealVNC).

If RealVNC rejects your code

RealVNC's help doesn't cover codes that don't work. The most common cause is the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

On the Security page in the Connect Portal, click Change device in the 2-step verification section, then scan the new QR code, confirm your password, enter the code and click Enable (RealVNC).

Do it while the old phone still works, since you need a code to sign in. If you have a Novaz iCloud backup or backup file, you can restore it on the new iPhone instead, and your RealVNC codes keep working without Change device. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your backup codes. RealVNC then asks you to turn 2-step verification off and on again with your new device, to keep the account secure (RealVNC).

Without backup codes, what happens depends on your subscription (RealVNC):

• Your subscription or team includes technical support: raise a support ticket. RealVNC may send you backup codes after checking who you are, and may ask for more information to do that. It decides case by case and doesn't say how long it takes.
• RealVNC Connect Lite: RealVNC says it can't provide backup codes, and its Lite support page repeats that it can't help if you lose the TOTP device (RealVNC).

More in Lost the phone with your authenticator app?

Turning 2-step verification off

RealVNC's help says only the account's owner can turn it off, but doesn't list the steps. The setting lives on the same Security page where you turned it on. In Novaz, remove the account afterwards: open it and tap Remove account.

Official RealVNC help

• How do I set up 2-step verification for my RealVNC account?
• I've lost my backup codes or mobile authenticator app - how do I sign in to my RealVNC account?
• Support for RealVNC Connect Lite subscriptions
• Why am I being asked to check my email each time I sign in to my RealVNC account?
• Do I have to sign up for a RealVNC account?
• RealVNC Account SSO - Setup Reference
• Introduction to Multi-Factor Authentication