Skip to content
Novaz AuthenticatorGET

Roblox 2FA: how to set up an authenticator app for 2-Step Verification

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Who needs it
  2. Turn on 2SV with an authenticator app
  3. Save your recovery codes right away
  4. When Roblox asks for a code
  5. If Roblox rejects your code
  6. If you lose your authenticator
  7. Changing phones or turning it off
  8. Official Roblox help

Roblox calls two-factor authentication 2-Step Verification (2SV). You can get codes by email or from an authenticator app, or use security keys, but only one method can be active at a time, and security keys need the authenticator app on first (Roblox). Roblox recommends the authenticator app (Roblox). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Roblox steps come from Roblox's help center and Creator Hub documentation, plus the screenshots in a 2021 announcement by Roblox staff on the official Developer Forum, all linked below and read on October 20, 2026. We haven't tested them on a Roblox account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Who needs it

For playing, 2SV is optional, though with 2SV on you can send up to 5,000 Robux a day instead of 500 (Roblox). Creators need it to publish a game for all ages (Roblox), publish to the Marketplace (Roblox), sell on the Creator Store (Roblox) and grant some group permissions, such as spending group revenue (Roblox). The Verified Badge needs the authenticator app specifically (Roblox).

Turn on 2SV with an authenticator app

You need a verified email address on the account first. Roblox's current help only says to turn on the toggle and follow the prompts (Roblox). The labels in steps 3 to 5 come from the 2021 staff announcement's screenshots (Roblox Developer Forum, staff post), so they may have changed.

  1. Sign in and open Settings: the gear icon in the upper right in a browser, or the three dots, then the gear icon, in the Roblox app.
  2. Open the Security tab and turn on the toggle for the authenticator app.
  3. The Authenticator Setup window shows a QR code. In Novaz, tap +, then Scan QR code. If you're using the Roblox app on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
  4. If you can't scan it, select Can't scan the QR code? Click here for manual entry. In Novaz, tap +, then Enter key manually, and type the key as the Setup key. See What is a 2FA setup key?
  5. Type the code from Novaz into Enter 6-digit Code and select Verify.

Roblox doesn't say how often its codes change. Scanning the QR code is safer, because it passes the code settings to your app. A key typed by hand in Novaz always gets 6-digit codes every 30 seconds.

Save your recovery codes right away

Recovery codes get you back in if your iPhone is gone and you have no recent Novaz backup. In Settings > Security, select Generate under the recovery codes section and enter your password. Roblox shows them once, each works once, and a new set deactivates the old one (Roblox). The 2021 staff post shows 10 codes. Keep them away from your phone. See 2FA backup codes.

Plan for Roblox's recovery rule too. If you lose your main 2SV method, you need two different verification methods on the account to get back in, and without them Roblox warns "you may be unable to regain access to your account" (Roblox). Its options are a phone number (13 and over) or a passkey on the Account Info tab, and backup codes on the Security tab.

When Roblox asks for a code

Roblox asks every time you sign in with your password or an email one-time code (Roblox). Signing in with a passkey skips 2SV (Roblox). The 2021 sign-in screenshot shows a Trust this device for 30 days box, which current help pages don't mention.

If you turn on Roblox's Enhanced Protection, authenticator codes stop counting for 2SV: only passkeys and hardware security keys do (Roblox).

If Roblox rejects your code

Roblox says to type the code the app shows right now, and the new one if a code fails. If that doesn't help, try another 2SV method you've set up, then contact Customer Support (Roblox). If every code fails, check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when it's 15 seconds or more off. More in Authenticator code not working?

If you lose your authenticator

On the code screen, choose Use another verification method and enter a recovery code (Roblox Developer Forum, staff post).

Without recovery codes, contact Customer Support through the Support form (Roblox). Roblox's 2SV pages don't say what proof Support asks for or how long it takes. Its hacked-account page says your account's first email address, or the billing email of your first purchase, helps prove ownership (Roblox). See Lost the phone with your authenticator app?

Changing phones or turning it off

Roblox's help doesn't describe moving the authenticator to a new phone or turning it off. The 2021 staff post notes that turning it back on means a new QR code or key. If you switch phones that way, do it while you can still sign in. With Novaz's iCloud backup or a backup file, you can skip that and restore your accounts on the new iPhone. See How to transfer your authenticator app to a new iPhone.

Turning the authenticator off also removes the Verified Badge (Roblox).

Official Roblox help

More guides: Gaming and betting