Reddit 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Reddit's two-factor authentication (2FA) has one catch you'll hit right away: you can't set it up in the Reddit app. Reddit says to do it while signed in on a computer's web browser (Reddit). After that, a password sign-in also takes a 6-digit code from an authenticator app, with backup codes as the fallback. Reddit's help mentions no text-message option.
It's optional, except that you need it to ask for an abandoned community through r/redditrequest (Reddit).
The steps below use Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Reddit steps come from Reddit's own Help Center articles, linked below, which we read on October 20, 2026. We haven't tested them on a Reddit account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Which sign-ins it protects
Reddit's 2FA only applies when you sign in with a password. If you sign in with Google or Apple, Reddit points you to those accounts for two-factor protection instead (Reddit). Reddit's help doesn't say whether signing in with a passkey or an emailed login link also asks for the code.
Turn on 2FA with an authenticator app
Sign in on a computer first. Reddit's help gives these steps for the current site (Reddit):
- Click your username in the top right and select Settings. Newer pages say avatar icon (Reddit).
- Under Account authorization, click Two-factor authentication.
- Enter your Reddit password and click Confirm.
- Follow Reddit's on-screen steps, which its help doesn't describe. Setups like this usually show a QR code: on your iPhone, open Novaz, tap +, then Scan QR code, and point the camera at the computer screen.
- When Reddit asks for a code, type the 6-digit code from Novaz. Save the backup codes Reddit gives you (more below).
- Reddit may ask you to sign out and back in.
On Old Reddit, the path is preferences in the top right, then the password/email tab, then click to enable under two-factor authentication, your password, and next.
Reddit's help also doesn't say whether you'll get a key to type instead. If one appears, tap + in Novaz, then Enter key manually, and paste it into Setup key. Novaz treats a typed key as a 6-digit, 30-second code, so scanning is the surer route when you can. See What is a 2FA setup key?
Backup codes
Reddit gives you ten backup codes, and each one works once. To get them, go to Settings, then under Account authorization click Access your backup codes, enter your password and click Continue. On Old Reddit it's the generate link next to backup codes on the password/email tab (Reddit).
Making a new set cancels the old one, and you can only do it while you're signed in. Reddit suggests writing the codes down or keeping them in a password manager. If that phone is gone and you have no Novaz backup (iCloud backup or a backup file), these codes are what gets you in. More in 2FA backup codes.
Signing in afterwards
Reddit asks for a code every time you sign in with your password. Third-party Reddit apps that use OAuth ask for it normally. For apps that don't, Reddit says to type your password, a colon, then the code, all in the password field: yourpassword:123456 (Reddit).
Reddit also states that it will "never ask you for your password or 2FA codes" (Reddit). A message asking for one isn't from Reddit.
If Reddit rejects your code
Reddit's lockout article suggests updating your authenticator app and checking that your device's time and time zone are right (Reddit). On iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz flags a clock that's 15 seconds or more out. More fixes: Authenticator code not working?
Moving to a new iPhone
Reddit's answer for a new phone is to turn 2FA off and set it up again on the new one (Reddit). With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead and Reddit's codes keep working. Without one, do as Reddit says. Keep the old iPhone until it's done, and save the fresh backup codes. Once Reddit accepts codes from the new phone, open Reddit on the old one and tap Remove account. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Reddit's lockout article lists these options (Reddit):
- A backup code. Type it where Reddit asks for the authentication code.
- A browser that's still signed in. Open your account settings there and make new backup codes.
- Google or Apple. From that signed-in browser, connect a Google account or Apple ID, then sign in with it elsewhere.
It lists no support route for removing 2FA. Another article says that if you protected your account with 2FA and can't get back in, Reddit can't act on a data deletion request until you regain access (Reddit). If you're signed out everywhere, the backup codes are the only way back that Reddit describes. More in Lost the phone with your authenticator app?
Turning 2FA off
This also needs a computer's web browser. Go to Settings, click Two-factor authentication under Account authorization, enter your password and click Turn Off. On Old Reddit, use click to disable on the password/email tab, then Disable Two-factor (Reddit).
Official Reddit help
- What is two-factor authentication and how do I set it up?
- What are two-factor authentication backup codes and how do I get them?
- I have two-factor authentication set up, but can't log in to my account. What do I do?
- How do I disable two-factor authentication?
- Does Reddit's two-factor authentication work with third-party apps?
- How do I know if a message from Reddit is official?
- How do I manage my phone number associated with my Reddit account?
- r/redditrequest criteria
- Can I delete data if I'm locked out of my account?