Spreedly 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Spreedly is a payments orchestration platform. Its web app at app.spreedly.com is where your team manages environments, users and API access secrets. For this account, two-factor authentication isn't something you choose to turn on. Since June 13, 2022, Spreedly has required multi-factor authentication (MFA) for every user who signs in to app.spreedly.com, and the only method its pages describe is a six-digit code from an authenticator app (Spreedly). There's no SMS or email code option in its documentation.
Spreedly names a few apps, but its developer docs say any authenticator app works (Spreedly). This guide uses Authenticator App - Novaz on iPhone.
How we checked this guide: the Spreedly steps come from Spreedly's own developer documentation and help center, linked below, which we read on October 21, 2026. The help center's article pages refused automated requests, so we read those articles through the help center's own public article feed on support.spreedly.com, which serves the same text. We haven't tested the steps on a Spreedly account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Where the setting is
You won't find an MFA switch in your profile. Spreedly asks you to enroll an authenticator app the first time you sign in as a new user (Spreedly). Sign-in runs through Auth0, so when you open app.spreedly.com the address bar shows auth.spreedly.com instead (Spreedly). New users get an email asking them to confirm their address (Spreedly), so do that before your first sign-in.
Set up the authenticator app
Spreedly's help article and developer docs describe these steps (Spreedly, Spreedly):
- Go to app.spreedly.com, enter your email address and password, and select Continue. If you've forgotten the password, use Forgot password? under the password field to get a reset email.
- Spreedly shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If you're signing in on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
- Type the six-digit code that Novaz now shows for Spreedly into the sign-in page.
- Copy the recovery code Spreedly shows and store it safely. The help article mentions this prompt before the QR code, so it may come earlier.
Spreedly's pages don't mention a text key you can type instead of scanning. If the QR code won't scan and the page offers a key, tap + in Novaz, then Enter key manually, and paste it into Setup key. See What is a 2FA setup key?
The recovery code
The help article describes a single recovery code shown during setup, which you need if you have to sign in without your phone. Spreedly's developer docs speak of recovery codes in the plural, so you may see more than one (Spreedly). Neither page says how to get a new one once you've used it.
Save that code even if you back up Novaz. Without iCloud backup or a backup file, Novaz's keys exist only on your iPhone, so the recovery code is your way back in if the phone is lost. Keep it in a password manager or on paper, away from the phone. More in 2FA backup codes.
When Spreedly asks for a code
After the password, every sign-in asks for a code. On the code screen you can check Remember this device for 30 days. Spreedly notes that the checkbox doesn't hold if you clear your cookies or sign in from a new browser, a new device or a different internet provider: you'll be asked again (Spreedly).
Your organization may sign you in through its own identity provider instead. Spreedly's support team turns on single sign-on (SSO) with Okta or Azure Active Directory over SAML, and it only covers Spreedly's web interfaces, not API access (Spreedly). Spreedly's pages don't say whether its own code is still asked for once SSO is on.
If Spreedly rejects your code
Spreedly's pages don't cover rejected codes. The usual cause is the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Lost your phone or getting a new one
Start with the recovery code from setup. Without it, Spreedly's documented route is its support team: the MFA article points you to its request form for questions about this login requirement, and the developer docs say to contact Spreedly if a password reset doesn't fix a login problem (Spreedly). Spreedly doesn't say what proof it asks for or how long a reset takes.
Spreedly doesn't document a way to move MFA to a new phone yourself, and its pages describe no way to turn MFA off. On the Novaz side, iCloud backup or a backup file (Export to file…, then Import from file… on the new iPhone) brings your accounts over with the same codes. Without one, keep the old phone until you've sorted out the new one with Spreedly. See How to transfer your authenticator app to a new iPhone and Lost the phone with your authenticator app?
