RightCapital 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
RightCapital is financial planning software. Advisors work in the Advisor Portal, and their clients sign in to a Client Portal to see their plans. Both kinds of account can turn on what RightCapital calls two-step verification: after your email and password, you type a 6-digit code from an authenticator app on your phone (RightCapital). It's optional, and the app is the only second step RightCapital's help describes.
The thing to know before you start: there's no recovery code to fall back on. If the phone goes, an advisor needs RightCapital Support to reset the setting, and a client needs their advisor. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the RightCapital steps come from RightCapital's own help center, including the screenshots in its articles, linked below, which we read on October 22, 2026. We haven't tested them on a RightCapital account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on 2FA with an authenticator app
Advisors and clients use the same steps, each in their own portal (RightCapital):
- Sign in to RightCapital.
- Click the Gear Icon at the top right, then Security.
- Open the Two-step Verification tab. Advisors see it next to Login Email, Password and Single Sign-on. Clients see it next to Login Email, Password and Permissions.
- Follow the instructions on that tab. RightCapital's help names Google Authenticator and Twilio Authy, but the codes are the standard kind: 6 digits that change every 30 seconds. Novaz handles those.
RightCapital's help stops at "follow the instructions" and doesn't show the setup screen, so it doesn't say whether you get a QR code, a text key, or both. Either works with Novaz:
- QR code: in Novaz, tap +, then Scan QR code, and point the camera at the screen. If you're setting this up on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Text key: tap +, then Enter key manually. Put RightCapital in Service, your email in Account if you like, and the key in Setup key. See What is a 2FA setup key?
When it's done, the tab reads Two-step verification is enabled.
Signing in afterwards
RightCapital asks for the code every time you sign in, not only on new devices. After your email and password, the Log In page asks for the 6-digit code from your authenticator app (RightCapital). Advisors can choose how long the Advisor Portal waits before signing them out when idle, from 30 minutes to 4 hours, under Gear Icon > Security > Session (RightCapital). That setting doesn't change the clients' timeout.
RightCapital also offers passkeys, set up under Gear Icon > Security > Passkey, which replace typing a password (RightCapital). Its help doesn't say whether a passkey sign-in still asks for the authenticator code. Passkeys aren't available when your firm signs in through single sign-on.
No backup codes
RightCapital's help doesn't mention backup or recovery codes or text-message codes. Your phone is the only way in, and unless you've made a Novaz backup (iCloud backup or a backup file), its keys exist only on that iPhone. See 2FA backup codes.
If RightCapital rejects your code
RightCapital's help has no advice on rejected codes. The usual cause is the phone's clock. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
Do this before you give up the old phone. RightCapital's help says to turn off two-step verification first, put the authenticator app on the new phone, and then turn two-step verification back on. If you skip the first step, its warning is blunt: "Otherwise you will lose access to your RightCapital account." (RightCapital)
With Novaz, an iCloud backup or a backup file lets you restore your accounts on the new iPhone, so your RightCapital codes keep working. Without a Novaz backup, follow RightCapital's route. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Who resets it depends on which account you have. The sign-in screen shown in RightCapital's help spells this out (RightCapital):
- Advisors: contact RightCapital Support to reset two-step verification. The help center lists email at support@rightcapital.com and phone at (888) 982-9596, option 2, staffed Monday to Friday, 9:00 am to 6:00 pm Eastern Time (RightCapital). RightCapital doesn't say what proof it asks for or how long a reset takes.
- Clients: ask your advisor. In the Advisor Portal, the advisor selects your name in the client list, opens Client Access, clicks Manage next to your email, and chooses Disable 2-step verification, then Disable to confirm (RightCapital, RightCapital). One of those articles shows a three-dot menu instead of Manage, so the button may look different. You can then sign in with your password and set it up again on your new phone.
More in Lost the phone with your authenticator app?
Turning 2FA off
Advisors can turn it off at any time: go to Gear Icon > Security > Two-step Verification and click Disable two-step verification (RightCapital). RightCapital's help only shows this for advisors. For clients, it documents the advisor turning it off from Client Access, as above. Once it's off, remove the RightCapital entry from Novaz: open it and tap Remove account.
