Rollbar 2FA: how to set up an authenticator app

Rollbar is the error-monitoring service developers use to track crashes and exceptions from their apps. Two-factor authentication (2FA) is something each Rollbar user turns on for their own user, and the only method Rollbar documents is an authenticator app on your phone (Rollbar). Two details stand out: signing in with a recovery code switches 2FA off, and if you lose both your phone and your codes, help depends on whether someone else on your account is an Owner or whether you pay for Rollbar. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Rollbar steps come from Rollbar's own documentation, linked below, which we read on October 21, 2026. We haven't tested them on a Rollbar account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Rollbar's two-factor page, last updated in September 2024, describes these steps (Rollbar):

1. In Rollbar, click your username in the lower-left corner and select Authentication Options. This is the same page where you change your password and manage GitHub or Google sign-in (Rollbar).
2. In the Two-Factor Authentication section, enter your Rollbar password and click Enable two-factor authentication.
3. A QR code appears on the left. In Novaz, tap +, then Scan QR code, and point the camera at it. If Rollbar is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
4. Type the code Novaz shows into the Two-Factor Code field on the right and click Validate.
5. Rollbar then shows a list of recovery codes. Copy them and keep them somewhere safe.

Rollbar's page only describes scanning the QR code. It doesn't mention a text key you could type by hand, so plan to scan. If you do find one on the screen, Novaz takes it under + > Enter key manually, in the Setup key field. See What is a 2FA setup key?

Recovery codes are your backup

Rollbar suggests that people who lose their phone restore a phone backup that still has their authenticator app on it (Rollbar). A phone backup doesn't carry Novaz's keys, but Novaz's own iCloud backup or a backup file can restore them on a new iPhone. Without one, the recovery codes are what stand between you and a locked account. Store them in a password manager or on paper, away from the phone. More in 2FA backup codes.

How a recovery code works at Rollbar is unusual. On the sign-in page, click Need to use your recovery code?, then enter your username, password and a recovery code. That signs you in, and Rollbar turns 2FA off for your user at the same time (Rollbar). Turn it back on and save the new codes as soon as you can.

When Rollbar asks for a code

With 2FA on, Rollbar asks for a code every time you log in. Enter the current code from Novaz and click Log In (Rollbar). Rollbar's docs don't say whether the code is also asked for when you sign in with GitHub or Google.

If your company's Rollbar account requires sign-in through a SAML identity provider (a feature of Advanced and Enterprise plans), opening that account's pages sends you to your company's sign-in instead (Rollbar). Your company's own checks apply there.

If Rollbar rejects your code

Rollbar's docs only say the code is time-sensitive and don't cover rejected codes. The usual cause is the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Moving to a new phone

Rollbar has no transfer step. Its docs say to disable two-factor authentication first, then enable it again with the new authenticator (Rollbar). Disabling needs a code from the old phone, so do this before you wipe or hand it in. With Novaz, you can instead restore your accounts on the new iPhone from iCloud backup or a backup file; without one, follow Rollbar's steps. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Start with a recovery code, as described above. If you have none, Rollbar's page on this case lists the ways back in (Rollbar):

• Another Owner on your account: a member of the Owners team can turn off 2FA for you from Account Settings > Members.
• Paying customers: Rollbar can put two small charges, under $1 each, on the credit card on file. Tell Rollbar the amounts and it turns off 2FA and refunds the charges right away.
• Only Owner on a free account: Rollbar says it can't turn off 2FA for you. Restoring a phone backup is the only other route it names. An iPhone backup doesn't bring back Novaz's keys, but a Novaz iCloud backup or backup file does.

Rollbar's page doesn't say how to reach it for the card check or how long it takes. More in Lost the phone with your authenticator app?

Turning 2FA off

Go back to Authentication Options. In the two-factor section, enter your password and a current code, then click Disable two-factor authentication (Rollbar). Then remove the entry in Novaz: open it and tap Remove account.

Official Rollbar help

• Two Factor Authentication
• Disable Two Factor Authentication
• User Settings
• SAML Identity Providers