Twilio Segment 2FA: how to set up an authenticator app

Segment, now sold as Twilio Segment, is the customer data platform teams use to collect events from their sites and apps and pass them on to other tools. One login opens every workspace you belong to. Segment calls its two-factor authentication multi-factor authentication (MFA), and it's available on every plan. You can get codes by text message, in the U.S. and Canada only, or from an authenticator app that makes time-based codes (Twilio Segment). It's optional unless a workspace owner requires it for everyone. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Segment steps come from Segment's documentation and from Twilio's help center articles about Segment, linked below, which we read on October 20, 2026. We haven't tested them on a Segment account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

First, check how you sign in

There are three ways into Segment, and only one uses Segment's own MFA (Twilio Segment, Twilio Segment):

• Segment email and password: the steps below are for you.
• Single sign-on (SSO): MFA belongs to your company's identity provider. Ask your IT team.
• Twilio Unified Login: if you created your Segment user from the Twilio Console or linked it to your Twilio user, your password and 2FA live in the Twilio Console, and logging in on the Segment site sends you to the Twilio sign-in (Twilio). Twilio's help covers adding an authenticator app from User Settings (Twilio).

Turn on MFA with an authenticator app

Segment's documentation keeps it short (Twilio Segment):

1. Log in to Segment and open your MFA Settings page, at app.segment.com/settings/user/mfa.
2. Click Authenticator App and follow the instructions on screen.

If a workspace that invited you requires MFA, a Multi-factor Authentication Required page appears while you create your login. Click Set Up next to Authenticator App (Twilio). Twilio points to the app as the way around text messages that never arrive.

Segment's pages don't show the setup screen or say whether it gives a QR code, a text key or both. Use whichever appears:

3. For a QR code, tap + in Novaz, then Scan QR code. If the code is on the iPhone you're holding, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
4. For a key, tap +, then Enter key manually. Fill in Service and put the key in Setup key. See What is a 2FA setup key? If both are offered, scan the QR code, since it also carries the code settings.
5. When Segment asks for a code, type the one Novaz shows for Segment.
6. Save the recovery code Segment gives you (next section).

Once MFA is on, Segment asks for a code at every login. Its pages don't mention an option to remember a device.

Keep the recovery code safe

Segment tells you to save your recovery code when you set up MFA, since it gets you in without your phone (Twilio Segment). The documentation talks about a single code, while a Twilio help article refers to "emergency recovery codes" (Twilio), so keep everything the setup screen shows you. Segment's pages don't say whether you can make a new code later.

If your phone is gone and you have no up-to-date Novaz backup, the recovery code is how you get in. Keep it in a password manager or on paper, off the phone. More in 2FA backup codes.

If Segment rejects your code

Twilio's help article for Segment blames the phone's clock first (Twilio). On iPhone, open Settings > General > Date & Time and make sure Set Automatically is on. The article suggests switching it off and back on to force a fresh sync. Novaz shows a warning when the clock is 15 seconds or more off.

If codes still fail, the article's next steps are a recovery code, then Segment Support. Other causes are in Authenticator code not working?

If you lose your authenticator

Segment's documentation gives these steps (Twilio Segment):

1. Enter your username and password on the login screen.
2. Click the authenticating a different way link.
3. Click Recovery Code and enter your saved code.

No code? On that same screen, click Send recovery code to my email, and Segment sends one to your account's email address. This is why Segment strongly recommends MFA on your email account as well: whoever gets into your inbox can get into Segment, even with MFA on.

If that fails too, Twilio's help says to contact Segment Support for formal account recovery (Twilio). Neither page says what proof Support asks for or how long it takes. Twilio Unified Login users recover through Twilio instead. See also Lost the phone with your authenticator app?

Changing phones or turning MFA off

Segment's pages don't explain how to move MFA to a new phone or turn it off. Check your MFA Settings page while you can still sign in, before you give up the old phone. With Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone; without one, you add Segment again on the new one. See How to transfer your authenticator app to a new iPhone.

Official Segment help

• Multi-Factor Authentication (MFA)
• Identity & Access Management Overview
• Fix Segment Multi-Factor Authentication MFA Login Issues
• Fix MFA Rejection of Newly Created Password in Segment
• Getting Started With the Product Switcher
• Setting Up Twilio Two-Factor Authentication (2FA) in a TOTP Authenticator App