Sendcloud 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Sendcloud is the shipping platform many online stores use to print carrier labels, handle returns and send tracking emails. Anyone who gets into it can see your customers' addresses. Two-factor authentication (2FA) is optional at Sendcloud, and you choose between two methods: a code sent to your email inbox, or a code from an authenticator app, which Sendcloud calls the most secure of the two (Sendcloud). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Sendcloud steps come from Sendcloud's own help center, linked below, which we read on October 21, 2026. The help center's web pages refused our plain requests, so we read the articles through the help center's public article feed on support.sendcloud.com, which serves the same text. We haven't tested the steps on a Sendcloud account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
One login, one authenticator
The detail that matters most for teams: Sendcloud ties 2FA to an account or a sub-user, not to an email address. If several people share one login, they also share one second factor, so only the person holding that phone can sign in. Sendcloud's advice is to give each employee their own sub-user, so each one can set up 2FA on their own phone (Sendcloud, Sendcloud).
Turn on 2FA with an authenticator app
Your login settings live on a separate site, account.sendcloud.com. To get there from the Sendcloud panel, go to Account > Profile, scroll to the account overview and click Manage your account. Then (Sendcloud):
- Open the 2FA activation page. Sign in first if Sendcloud asks.
- Sendcloud shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the page is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the 6-digit code that Novaz shows into the Verification code field.
- Click Verify.
- Sendcloud now shows your recovery codes. Save them before you leave the page.
Sendcloud's help doesn't mention a text key you can type instead of scanning. If you see one, tap +, then Enter key manually in Novaz and paste it as the Setup key. See What is a 2FA setup key?
Recovery codes are your backup
Novaz's keys stay on your iPhone unless you turn on iCloud backup or export a backup file. If that phone is lost and you have neither, the recovery codes Sendcloud gave you at setup are what stand between you and a locked account. Keep them in a password manager or on paper, away from the phone.
If you've used up or lost the codes, you can create new ones on your 2FA settings page. Every older code stops working the moment you do, even ones you never used (Sendcloud). More on storing them in 2FA backup codes.
Signing in afterwards
Sendcloud asks for your email address first and then decides what comes next, such as a password or an emailed one-time code. With 2FA on, it asks for a verification code each time you log in. Sendcloud's help says to enter the 6-digit code from your app if you set one up, and the 9-digit code from your inbox if you didn't (Sendcloud).
You can also log in with Google or Facebook. Sendcloud's help doesn't say whether its own 2FA prompt still appears when you do.
If Sendcloud rejects your code
Sendcloud's help doesn't cover rejected codes. Check the iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Also make sure you're typing the 6-digit app code, not a 9-digit email code from an earlier attempt. Other causes are in Authenticator code not working?
Changing phones
Sendcloud doesn't describe a phone switch. What it does document is turning 2FA off and setting it up again, so the safe order is: while the old phone still works, turn 2FA off on the 2FA settings page, then run the setup above with the new phone and save the new recovery codes. If you have a Novaz iCloud backup or backup file, you can instead restore your accounts on the new iPhone. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Sign in with one of your recovery codes, then set up 2FA again on your new phone. Sendcloud's help doesn't describe how to enter a recovery code at the prompt, or what to do if you have no codes left.
Sendcloud's support team works Monday to Friday through Sendcloud Messenger, support tickets and, from the Growth plan up, by phone (Sendcloud). All three are opened from inside the Sendcloud panel, and the help center doesn't say how to reach support when you can't sign in, what proof it asks for, or how long a reset takes. If a colleague has their own sub-user, they can still sign in and open a chat for you. More in Lost the phone with your authenticator app?
Turning 2FA off
On the 2FA settings page, click Disable two-factor and confirm when Sendcloud asks (Sendcloud). Then remove the entry from Novaz: open it and tap Remove account.
