RunSignup 2FA: how to set up an authenticator app

RunSignup is where many runners register for races, and where race directors run their events, take payments and post results. Its two-factor authentication, which RunSignup calls MFA (multi-factor authentication), is optional for everyone, but RunSignup recommends it, especially for race directors who manage an event from their account (RunSignup).

There's only one method: a code from an authenticator app. RunSignup doesn't send codes by text message, and its blog gives cost as the reason (RunSignup). This guide uses Authenticator App - Novaz on iPhone. Novaz isn't on RunSignup's list of suggested apps, but any app that makes standard 6-digit, 30-second codes works the same way.

How we checked this guide: the RunSignup steps come from RunSignup's own help center and official blog, including the screenshots and screen recording on those pages, which we read on October 21, 2026. We haven't tested them on a RunSignup account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Where the setting is

The MFA setting isn't in a settings menu. It sits in the details of your profile, hidden until you expand them. RunSignup's help article, last updated in September 2025, walks through it with a screen recording (RunSignup). The setup is easiest on a computer, because you'll point your iPhone at the screen.

Turn on 2FA with an authenticator app

1. Sign in to RunSignup and open your profile.
2. Under your name, click Show More. Among the extra details is an MFA line with its status.
3. Click the MFA Disabled link. The MFA Status page opens.
4. Click Set up MFA. The MFA Setup page shows a QR code.
5. In Novaz, tap +, then Scan QR code, and point the camera at the QR code on your screen. If you're doing this on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
6. Type the 6-digit code from Novaz in Code from authentication app, then click Finish MFA Setup.

RunSignup's pages don't mention a text key you could type instead of scanning, and the setup page in its recording shows only the QR code. So plan to scan it. If a key does appear, in Novaz tap +, then Enter key manually, and put it in Setup key. See What is a 2FA setup key?

The blog post that announced the feature in 2018 also warns that the QR code in its screenshot is only an example. Scan the one on your own screen, not a picture from a help page.

Signing in afterwards

Each time you sign in, the form adds an MFA Token field under your password. Open Novaz, find RunSignup, and type the code that's showing. A Keep me signed in. checkbox sits below it on the sign-in form (RunSignup). RunSignup's pages don't say whether it asks for a token for anything other than signing in.

No backup codes

Neither RunSignup page mentions backup or recovery codes. The only documented way back in without your authenticator is Reset MFA, which works through your email (below). So the email address on your RunSignup account is your backup: make sure you can still get into it before you turn MFA on.

If RunSignup rejects your code

RunSignup's pages don't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Also check that you're typing the newest code, since it changes every 30 seconds. More causes are in Authenticator code not working?

If you lose your phone or get a new one

On the sign-in form, under the MFA Token field, next to Lost your MFA device?, click Reset MFA. RunSignup then emails you instructions (RunSignup). Its help names both cases for this link: a lost token, and a new phone that you didn't set up before switching. It doesn't describe the steps in the email, what else it may ask for, or how long the reset takes.

RunSignup doesn't document a way to move MFA to a new phone yourself. With Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone and skip that. Without one, when you change phones, expect to use Reset MFA and then set RunSignup up again in Novaz on the new phone. Keep the old phone until that's done. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?

Turning MFA off

RunSignup's pages don't explain how to turn MFA off. The MFA Status page you reach from your profile is the likely place, but its options once MFA is on aren't shown. If you remove RunSignup from Novaz, do it only after MFA is off or reset, or you won't have a code at your next sign-in. In Novaz, open the account and tap Remove account.

Official RunSignup help

• Enable MFA for Your Profile
• Multi-Factor Authentication (RunSignup blog)