Skip to content
Novaz AuthenticatorGET

Shadow 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Where the setting is
  2. Turn on 2FA with an authenticator app
  3. Turn on backup codes, and confirm them
  4. When Shadow asks for a code
  5. If Shadow rejects your code
  6. Changing phones
  7. If you lose your authenticator
  8. Turning 2FA off
  9. Official Shadow help

Your Shadow account signs you in to Shadow PC, the cloud computer service, and to Shadow Drive. Two-factor authentication (2FA) is optional and off until you turn it on, and Shadow has no plans to make it mandatory (Shadow). It works with time-based authenticator apps. An older version of the help also covered security keys, Touch ID and backup codes.

The catch: Shadow's current 2FA article names apps that work but no longer gives the setup steps. This guide pieces them together from Shadow's current pages and the older article, and flags labels that may have changed. We use Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Shadow steps come from Shadow's own help center, linked below, which we read on October 21, 2026. The help pages block automated visits, so we read current articles through the help center's public article feed, and the 2023 version of the 2FA article in an archived copy on web.archive.org. We haven't tested them on a Shadow account, so a label may differ. The Novaz steps are checked against the app, version 1.0.5.

Where the setting is

Shadow's pages name the screen differently. One puts your 2FA method under Account > My Account (Shadow), another uses Account > Manage my security (Shadow), and the password article has a Security tab with Edit my password (Shadow). The 2023 article put 2FA behind that same Edit my password button, so start on the security screen.

Turn on 2FA with an authenticator app

These steps follow the 2023 version of Shadow's article, read in an archived copy (Shadow, archived). Shadow then called the account area your Customer Space.

  1. Go to shadow.tech, select Login, and open your security settings.
  2. Select Edit my password or Edit my email.
  3. Scroll to the section Managing Two Factor. It shows a QR code and a secret code.
  4. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
  5. If you'd rather type it, tap +, then Enter key manually in Novaz, and paste Shadow's secret code as the Setup key. Shadow's codes change every 30 seconds, which matches Novaz. See What is a 2FA setup key?
  6. Type the first code from Novaz under Verify the code to switch the method on.

Turn on backup codes, and confirm them

The 2023 article offers one-time backup codes as a fallback. On the same screen, scroll to Backup codes, select Generate new backup codes, save them, then select Confirm your backup codes. That last click matters: the article says that without it, the codes stay inactive and won't work at sign-in. You can see them again with Display Backup codes (Shadow, archived).

The current 2FA article no longer mentions backup codes, but Shadow's sign-in article still tells you to have your code ready if you use 2FA "or a backup key" (Shadow). Unless you've turned on Novaz's iCloud backup or exported a backup file, its keys exist only on your iPhone, so these codes are your way back in. Keep them away from the phone. More in 2FA backup codes.

When Shadow asks for a code

Once 2FA is on, Shadow asks for a code when you sign in to its services, and when you change your password to get back into your account. It still applies if you sign in with Apple or Google (Shadow).

Shadow's phishing article says its genuine sign-in pages always start with https://auth.eu.shadow.tech (Shadow). Check the address before you type a code.

One loose end: the Shadow Drive FAQ still calls app-based 2FA for Shadow Drive planned (Shadow), while the 2FA article includes Shadow Drive. Shadow Drive also emails a code the first time you sign in on a new device (Shadow).

If Shadow rejects your code

Shadow's help doesn't cover rejected codes. The usual cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Changing phones

Shadow doesn't describe moving 2FA to a new phone. If you use Novaz's iCloud backup or a backup file, restore it on the new iPhone and Shadow's codes keep working. Without one, set the authenticator up again with the new iPhone using the steps above, while the old phone still works. Shadow doesn't say whether that replaces the old setup, so test a sign-in before you remove Shadow from the old phone. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your backup codes, if you turned them on and confirmed them. With no working method left, the 2023 article says you can't sign in and must contact Shadow Support for an identity check (Shadow, archived). Its current pages link to a support form rather than an email address (Shadow). Shadow doesn't say what proof it asks for or how long the check takes. More in Lost the phone with your authenticator app?

Turning 2FA off

The 2023 article says 2FA turns off once no method is left, but names no button for removing an authenticator app. Remove Shadow from Novaz (open it, tap Remove account) only after Shadow stops asking for the code.

Official Shadow help