Remitano 2FA: how to set up an authenticator app

Remitano is a crypto exchange for peer-to-peer trading and swaps. You sign in with an emailed login link or with Google, Facebook or Apple, so there's no Remitano password (Remitano). Its two-factor authentication (2FA) is an authenticator app that makes six-digit codes, and Remitano asks for one before protected actions such as creating an offer or confirming a withdrawal (Remitano).

The thing to plan for is recovery. Remitano's help pages don't mention backup codes. If you lose the authenticator, the documented way back is an identity review with a selfie and your ID document. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Remitano steps come from Remitano's own help center and developer documentation, linked below, which we read on October 21, 2026. We haven't tested them on a Remitano account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Start on the website or in the Remitano app (Remitano):

1. Website: sign in at remitano.com, open your profile or username menu and choose Settings. Find 2FA Authenticator and select Manage or Enable. Mobile app: open Profile, then tap 2FA Authenticator.
2. Remitano shows a QR code and a text key. The help center calls the key a 16-digit key or authenticator token; Remitano's developer page calls it the AUTHENTICATOR_TOKEN and tells you to store it securely (Remitano Developers).
3. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone. Remitano warns against keeping an unprotected screenshot of the QR code, so delete it once the account is added.
4. Or type the key: tap +, then Enter key manually. Put Remitano in Service, your email or username in Account, and the key in Setup key. See What is a 2FA setup key?
5. Back in Remitano, enter the six-digit code from Novaz and select Submit.
6. Open 2FA Authenticator again and check that it shows as enabled.

Remitano's developer page, which is older, names the settings section Authenticator Authentication, so you may see that label instead.

Save the key, because there are no backup codes

Remitano's security guide suggests keeping the setup secret in a safe offline place, not only on the phone that runs the authenticator (Remitano). That matters with Novaz too: unless you turn on iCloud backup or export a backup file, its keys exist only on your iPhone. Write the key down or keep it in a password manager. Anyone with it can make your codes, so never share it.

If you think the key leaked, Remitano says to stop using it: turn 2FA off and on again to get a new one (Remitano).

If Remitano rejects your code

Remitano's troubleshooting article lists several causes (Remitano):

• The code ran out. Wait for a fresh one and submit it once.
• Wrong entry. With several Remitano entries, match the account label.
• The clock. On iPhone, go to Settings > General > Date & Time > Set Automatically, and check the time zone. Novaz warns you when the clock is 15 seconds or more off.
• Too many requests. Repeated tries trigger a temporary limit. Wait for the cooldown in the message.
• An old key. Turning 2FA off and on creates a new key, so an older entry stops working.

More causes are in Authenticator code not working?

Changing phones

Remitano's advice is to get the authenticator working on the new device and test it before you remove the old one (Remitano). With Novaz you have three options. If you keep an iCloud backup or backup file, restore it on the new iPhone. If you saved the key, add it to Novaz on the new iPhone with Enter key manually. If you have neither, use a code from the old phone to turn 2FA off, then turn it on again with the new phone. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

First, add the key again if you saved it. Otherwise, sign in, open 2FA Authenticator, choose Disable and then I lost Authenticator (Remitano). Remitano reviews ownership, and its help describes the proof:

• a selfie of you, the account holder,
• holding the identity document you used for KYC verification,
• with a handwritten note asking to disable the authenticator, dated that day. Copy the exact wording your recovery screen shows.

Your account shows the request's status; Remitano gives no fixed review time. Once access is back, turn 2FA on again with a new key.

If your phone was stolen or someone may be in your account, Remitano points to the Emergency Lock option in Settings and to its official support (Remitano). More in Lost the phone with your authenticator app?

Turning 2FA off

Open 2FA Authenticator, choose Disable, enter a current code from Novaz and select Disable or Submit (Remitano). Then you can remove the entry in Novaz: open it and tap Remove account.

Official Remitano help

• How to Enable Two-Factor Authentication (2FA) on Remitano
• Lost Your Remitano Authenticator? How to Recover and Reset 2FA
• How to Fix an Invalid or Expired Authenticator Code on Remitano
• How Remitano Security Works: Account and Asset Protection Guide
• How to Create and Log In to a Remitano Account: Email, Google, Facebook or Apple
• Get your authenticator secret (Remitano Developers)