SignRequest 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
SignRequest is an e-signature service: you upload a document, add the people who need to sign, and keep the signed copies in your account. Two-factor authentication (2FA) for your own login is optional, and SignRequest recommends it (SignRequest). If you use SignRequest with Zapier, read the next section first.
You can get login codes from a token generator (an authenticator app) or by text message. This guide covers the app, using Authenticator App - Novaz on iPhone. SignRequest's help names Google Authenticator, but Novaz or any other authenticator app works the same way.
How we checked this guide: the SignRequest steps come from SignRequest's own help center, linked below, including the screenshots in its articles. The article pages turned away plain automated requests, so we read their text through the help center's public article feed on help.signrequest.com, on October 22, 2026. We haven't tested the steps on a SignRequest account, and some of the screenshots date from 2018 to 2021, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Before you start: Zapier
SignRequest's Zapier integration doesn't work while two-factor authentication is on. Turning it on stops existing Zaps, and Zapier shows a 403 Forbidden error. The only fix SignRequest gives is to turn 2FA off again (SignRequest, SignRequest). If a Zap sends your documents for signing, decide which matters more first.
Turn on 2FA with an authenticator app
SignRequest's article and its screenshots show these steps (SignRequest):
- Sign in at signrequest.com and open your Account page.
- Scroll to Account Security. Under Two-Factor Authentication, select Enable Two-Factor Authentication.
- In the window that opens, choose Token generator (not Text message), then select Next.
- SignRequest shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If you're looking at SignRequest on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the 6-digit code Novaz shows into the Token box and select Verify.
- SignRequest confirms that 2FA is on and suggests adding a phone number, so you have a way back in if you lose the phone with your app. Select Next to continue.
SignRequest's screenshot shows only a QR code, with no text key, and the help doesn't describe another way. If you do see a key, see What is a 2FA setup key? for how to type it into Novaz with Enter key manually.
Backup tokens
After setup, the Account Security section shows a Backup Tokens button. SignRequest lists creating them as an optional last step, but its help doesn't say how many you get or how to use them when you sign in (SignRequest).
Make them anyway. Unless you've turned on Novaz's iCloud backup or kept a backup file, its keys exist only on your iPhone, so backup tokens and the recovery phone number are what you have if that iPhone is lost. Store the tokens in a password manager or on paper, away from your phone. More in 2FA backup codes.
When SignRequest asks for a code
SignRequest's help doesn't say whether it asks for a token at every sign-in or only on new devices or browsers. Keep Novaz at hand whenever you sign in.
The text-message codes and passwords you can add for signers, per document under Advanced, are separate from your own login (SignRequest).
If SignRequest rejects your code
SignRequest's help doesn't cover rejected tokens. The usual cause is a phone clock that has drifted. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz shows a warning when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
SignRequest doesn't document moving the token generator to a new phone. Its screenshot of Account Security with 2FA on shows an Add Two-Factor Authentication Device button and a Delete button next to Token Generator, but the help doesn't explain them. Make the switch while the old phone still works.
With Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone instead. Without one, the new iPhone needs a fresh setup with a new QR code from SignRequest. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Try a backup token first, or the phone number you added for account recovery. SignRequest's help doesn't describe how either one works at the sign-in screen, or what happens if you have neither.
In that case, contact SignRequest support. Its help center says the way to reach it is a ticket at help.signrequest.com/hc/en-us/requests/new, answered Monday to Friday, usually within a couple of hours (SignRequest). The help doesn't say what proof it asks for before it removes 2FA from an account. It helps to write from the email address on your SignRequest account. More in Lost the phone with your authenticator app?
Resetting your password with Forgot password doesn't replace the token: it only sends a link to set a new password (SignRequest).
Turning 2FA off
Sign in, open the Account page, scroll to Account Security and select Disable Two-factor Authentication (SignRequest). After that, Zapier can connect again. In Novaz, open the SignRequest entry and tap Remove account.
