CloudFlow (Section.io) 2FA: how to set up an authenticator app

Section.io is a platform for running apps, containers and Kubernetes workloads across many locations. Its documentation now calls the platform CloudFlow, and the section.io home page now redirects to Webscale, whose sign-in menu lists Sign into Section.io and links to console.section.io (Webscale, CloudFlow). It's the same account either way: the one you use to manage projects, users and deployments.

Two-factor authentication (2FA) is off until you turn it on. CloudFlow offers two kinds: a code by text message (SMS) or a code from an authenticator app. An account admin can also ask CloudFlow Support to make 2FA mandatory for everyone invited to the account (CloudFlow). This guide uses the authenticator app option with Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the CloudFlow steps come from CloudFlow's own documentation on section.io, linked below, which we read on October 21, 2026. We haven't tested them on a CloudFlow account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

CloudFlow's current documentation describes these steps (CloudFlow):

1. Sign in to your CloudFlow account at console.section.io.
2. Open the My Account tab.
3. In the My Profile setting, move the 2FA switch from Disabled to Enabled.
4. Choose the authentication app option rather than SMS.
5. Click Save.

The page for the older ("classic") console gives the same steps with a sidebar instead of a tab: in the left sidebar, click My Account, then My profile (CloudFlow). Labels may differ a little between the two consoles.

That's where CloudFlow's documentation stops. It doesn't show the screen that comes after you pick the app, so it doesn't say whether you get a QR code, a text key, or both. Here's how to handle either in Novaz:

• A QR code: in Novaz, tap +, then Scan QR code, and point the camera at it. If the console is open on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
• A key to type: tap +, then Enter key manually. Fill in Service (for example, CloudFlow), Account if you want, and the key as the Setup key. See What is a 2FA setup key?

If the console asks for a code to finish, type the current 6-digit code from Novaz. Scanning is the safer choice when you have it, since a QR code tells the app the code settings and CloudFlow's documentation doesn't list them.

If you're deciding between the two options, authenticator app vs. SMS covers why the app is usually the stronger pick.

No backup codes mentioned

CloudFlow's documentation doesn't mention backup or recovery codes, and it doesn't say when the console asks for a code (every sign-in or only on new devices). Its only documented fallback for a lost authenticator is a manual reset by Support, described below. Unless you back up Novaz with iCloud backup or a backup file, its keys exist only on your iPhone, so plan for that before you need it: make sure you can still get into the email address on your CloudFlow user.

If CloudFlow rejects your code

CloudFlow's documentation has no advice on rejected codes. The most common cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

CloudFlow doesn't describe a way to move 2FA to a new phone. The documented switch lets you turn 2FA off and on again, so the practical route is to do that while you still have the old phone: turn 2FA off, then turn it on again with Novaz on the new iPhone. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Without the app, you need CloudFlow Support to turn 2FA off for you. The documentation says to send the support request from your user email address, meaning the one you sign in with. CloudFlow says the reset involves extensive verification and "can take up to 7 days to be completed" (CloudFlow). The documentation doesn't list what proof it asks for. The support form is linked from the docs at support.section.io, and the console has a Support link too (CloudFlow).

More in Lost the phone with your authenticator app?

Turning 2FA off

Go back to My Account, and in your profile move the 2FA switch from Enabled to Disabled, then click Save (CloudFlow). If you also remove CloudFlow from Novaz, open the account in Novaz and tap Remove account, but only after 2FA is off.

Official CloudFlow help

• Two Factor Authentication (CloudFlow Docs)
• Manage User (CloudFlow Docs, classic console)
• Welcome to CloudFlow (CloudFlow Docs overview)
• Webscale, where section.io now redirects, with the Sign into Section.io link