Splashtop 2FA: how to set up an authenticator app

Your Splashtop account is what you sign in with at my.splashtop.com, the web console, and in the Splashtop Business app you use to reach remote computers. Splashtop calls its 2FA two-step verification. It's optional unless your team owner requires it, and it works only with an authenticator app, never text messages (Splashtop). It says its two-step verification "accepts any authenticator that generates Time-based One-Time Passwords" (Splashtop). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

One setup step matters more than it looks: Splashtop asks for a backup phone number that can send texts. If you lose your recovery codes, that number gets them back, so choose one you'll keep.

How we checked this guide: the Splashtop steps come from Splashtop's own help center, linked below, which we read on October 20, 2026. We haven't tested them on a Splashtop account, so a label may differ slightly. Splashtop's articles also name the settings page differently: older ones say Account Info, newer ones Account Settings. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

These steps follow Splashtop's setup article (Splashtop), with the settings page as its newer articles describe it (Splashtop):

1. Sign in at my.splashtop.com. Click the blue circle with your initial in the top right corner, then Account Settings.
2. Find Two-Step Verification and click Turn On. In the box that opens, click Get Started.
3. The next window names a few authenticator apps. You don't have to install one of them. Click Next to get the QR code.
4. In Novaz, tap +, then Scan QR code, and point the camera at the code. If the code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
5. Splashtop also shows a secret key. To use it, tap +, then Enter key manually, and paste it into Setup key. Then click Next in Splashtop.
6. Type a code from Novaz and click Check. A green check means it worked: click Next. A red X means a typo, an expired code or a failed pairing. Try a fresh code, then remove the entry from Novaz and add it again.
7. Save the 10 recovery codes on the last page, then tick I have printed or saved these codes.
8. Enter your backup number, click Check to validate it, then click OK.

Splashtop's codes have six digits and change every 30 seconds, which matches what Novaz makes from a typed key. Some apps file the entry under an odd name such as "gmail", Splashtop's help notes. To pick the name yourself, type the key and enter Splashtop as the Service. If Novaz won't accept the key (it needs at least 16 characters), scan the QR code. See What is a 2FA setup key?

Recovery codes and the backup number

Each of the 10 recovery codes works once (Splashtop). Unless you've made a Novaz backup, its keys exist only on your iPhone, so these codes are your way back in. Keep them in a password manager or on paper. See 2FA backup codes.

For the backup number, Splashtop suggests your own mobile, a work mobile or a Google Voice number (Splashtop). Its help doesn't describe how to change that number later.

When Splashtop asks for a code

Splashtop asks for a code when you sign in from a new device, on the web or in the Business app. The code prompt has a box to trust the device, and a trusted device stops asking (Splashtop). Team owners can limit how long that trust lasts with Allow users to trust devices for (Splashtop).

To remove one, open Account Settings, click Manage next to Your Trusted Devices, and click the X beside it.

Two-step verification also replaces the device-approval emails Splashtop otherwise sends (Splashtop).

Team owners can require two-step verification under Security in the team settings, with Require admins to use two-step verification and Require members to use two-step verification (Splashtop).

If Splashtop rejects your code

Splashtop points to the phone's clock first. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. If that doesn't help, Splashtop suggests turning two-step verification off and on again. After a new phone, a reset or a deleted app, old codes won't work, and you need a recovery code (Splashtop). More in Authenticator code not working?

Changing phones

If you use Novaz's iCloud backup or a backup file, you can restore your accounts on the new iPhone and the codes keep working. Without one, use the route Splashtop gives for apps that can't transfer (Splashtop): while you still have the old phone, sign in, turn two-step verification off, and set it up again with the new one. Account Settings also has a Reset option for this. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Team owners and admins can't reset or turn off your two-step verification, so you need a recovery code or your backup number (Splashtop, Splashtop).

• With a recovery code: sign in at my.splashtop.com. At the code prompt, click Use an emergency recovery code instead, below the Submit button. Type a code into the box marked 8-digit code, complete the CAPTCHA and click Submit. Then open Account Settings and choose Reset or Turn off next to Two-Step Verification.
• Without recovery codes: text your Splashtop account email address to +1 (408) 676-3505 from the backup number you entered at setup. Splashtop checks the number and texts your recovery codes back.

Splashtop doesn't say how long the text reply takes, or what to do if you've lost both the codes and the backup number. More in Lost the phone with your authenticator app?

Turning 2FA off

Open Account Settings and click Turn off next to Two-Step Verification (Splashtop).

Official Splashtop help

• How do I set up two-step verification (2FA)?
• How do I use recovery codes/reset 2FA?
• Got a new phone or lost two-step verification codes?
• My Six Digit Authentication Codes Aren't Working
• How do I export my Authenticator to a new phone for 2FA?
• How to manage 2FA trusted devices
• Using YubiKey Authenticator with Splashtop Two-Step Verification (2FA)
• Splashtop Team Settings
• What is Device Authentication/Verification emails?