Slack 2FA: how to set up an authenticator app

In Slack, two-factor authentication (2FA) belongs to each workspace account, not to your email address. If you belong to several workspaces, Slack says "you'll need to set up 2FA for each account separately" (Slack). Turning it on at work doesn't protect a community workspace you joined with the same email.

Slack offers a text message (SMS) or an authentication app. It works with most time-based (TOTP) apps, and doesn't support U2F security keys (Slack). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Slack steps come from Slack's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a Slack account. Slack's pages show no dates and don't all use the same labels, so what you see may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Who has to use it

• Owners and admins on paid plans must use 2FA to sign in, even if the workspace hasn't made it mandatory. With single sign-on (SSO), this applies only to those who can skip SSO and sign in with email and password (Slack).
• Everyone, if the workspace requires it. Owners and admins can make 2FA mandatory, and on paid plans choose Authenticator apps only to rule out SMS. Anyone who hasn't set it up within 24 hours is signed out until they do (Slack).
• SSO workspaces set up 2FA with the identity provider instead. Slack turns its own 2FA off when you connect your SSO account (Slack).

Turn on 2FA with an authenticator app

Slack's help describes these steps (Slack):

1. Sign in to the workspace and open your Account page at my.slack.com/account/settings. For another workspace, use its own address: your-workspace.slack.com/account/settings.
2. Next to Two-factor Authentication, click Expand, then Set Up Two-Factor Authentication.
3. Enter your password. If you don't have one, for example because you sign in with Apple or Google, add one first with a password reset by email (Slack).
4. Click Use an app.
5. Slack shows a QR code. In Novaz, tap +, then Scan QR code. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
6. Type the 6-digit code from Novaz into Slack and press Verify Code.

Slack says you can enter the code by hand instead, but doesn't name that option or say how often codes change. Scanning is safer, because the QR code carries the code settings. To type it, tap +, then Enter key manually, fill in Service, and type the key as the Setup key. See What is a 2FA setup key?

Repeat this in each workspace. Each gives you its own QR code and its own entry in Novaz.

Save your backup codes

Slack gives you backup codes at setup, and you can view them again on your Account page. Each code works once (Slack). Slack doesn't say how many you get or whether you can make new ones. Unless you back up Novaz, its keys live only on your iPhone, so these codes matter: save a set for each workspace, away from your phone. See 2FA backup codes.

When Slack asks for a code

Slack says you enter a code with your password each time you sign in (Slack), and that a workspace requiring 2FA asks for a 6-digit code (Slack). It doesn't mention trusting a device, or explain how 2FA combines with the passkeys and emailed codes its sign-in page also lists.

If Slack rejects your code

Slack's troubleshooting only covers backup codes and lockouts. Make sure you're using the Novaz entry for the right workspace. Then check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More in Authenticator code not working?

Changing phones

Slack doesn't describe moving 2FA to a new phone yourself. Its answer for a new phone is the same as for a lost one: an owner or admin turns off 2FA for your account, and you set it up again (Slack). With Novaz's iCloud backup or a backup file, you can avoid that: restore your accounts on the new iPhone and Slack's codes keep working. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

1. Use a backup code for that workspace.
2. Ask a Workspace Owner or Admin to turn off 2FA for you. Slack's 2FA page gives them this path: workspace name, Tools & settings, Manage members, the three dots next to your name, Disable two-factor authentication (Slack). Its admin page uses Admin > Workspace settings > People, the three dots, Disable 2FA (Slack).
3. Ask the right person. Only the Workspace Primary Owner can do this for a Workspace Owner, and only Workspace Owners for a Workspace Admin (Slack).

If 2FA is mandatory, you'll set it up again at your next sign-in (Slack). Slack doesn't say what a locked-out Primary Owner should do, or whether Slack can reset 2FA, with what proof, or how long it takes. Its sign-in page just links to Slack Support (Slack). More in Lost the phone with your authenticator app?

Slack doesn't describe turning off your own 2FA either, only an owner or admin disabling it as above.

Official Slack help

• Set up two-factor authentication
• Mandatory workspace two-factor authentication
• Sign in to Slack
• Reset your password