Square 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Your Square account is what you use to run the Square Dashboard and the Square Point of Sale app. Square calls its 2FA two-step verification, and it asks you to turn it on when you first set up and activate the account (Square). Codes come by text message, voice call or an authentication app, though the UK page leaves out voice calls (Square). Square's help doesn't mention backup codes, so it's worth setting up a second method early. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.
How we checked this guide: the Square steps come from Square's own Support Center, linked below, which we read on October 20, 2026. We haven't tested them on a Square account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Turn on two-step verification with an authenticator app
You need account & settings permissions to change this, and Square allows one authentication app at a time. Square's US article gives these steps (Square):
- Sign in to the Square Dashboard and go to Settings > Account & Settings > Personal information > Sign in and security (some pages say Sign in & security).
- Under Two-step verification, select Enable, then Use another method. The first screen offers text messages, so the app option is one step further in.
- Select Authentication app, then Next.
- Square shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the Dashboard is open on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
- If the code won't scan, select Can't scan the QR code? for a key code. In Novaz, tap +, then Enter key manually, and fill in Service, Account (optional) and Setup key. See What is a 2FA setup key?
- Select Next in the Dashboard.
- Enter the code Novaz shows for Square and select Verify.
Square's pages don't say how many digits its codes have or how often they change. Scanning the QR code is the safer route, since it hands those settings to Novaz. A key typed by hand always gets 6 digits every 30 seconds.
Add a backup method
Instead of backup codes, Square lets you add a second phone number or an authentication app once your first method works (Square). Unless you've backed up Novaz to iCloud or to a backup file, its keys exist only on your iPhone, so a phone number on file is what gets you back in if that iPhone is gone. To add one, open Sign in and security, select Manage two-step verification, then Add phone number, and verify it. Texted codes are weaker than app codes, as authenticator app vs SMS explains, but they beat being locked out.
When Square asks for a code
Square asks for a code when you sign in to the Square app or the Dashboard. On a device you trust, choose Remember this device for 90 days; after that, you'll need a code again (Square).
A 2024 post on Square's blog adds that sensitive changes, such as linking a new bank account, need a code sent by email or from an authenticator app (Square).
Requiring it for your team
Owners can make team members use two-step verification on their own devices: Settings > Account & Settings > My business > Security, then turn on Two-step verification for team members under Business two-step verification. Team members who skip the emailed setup must finish it at their next sign-in (Square).
If Square rejects your code
Square's help doesn't cover rejected authenticator codes. Check the iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off.
If you've set Square up more than once, use the entry you added last: each new setup normally issues a new key. Remove older entries by opening them and tapping Remove account. More causes are in Authenticator code not working?
Changing phones
If you use Novaz's iCloud backup or a backup file, restore your accounts on the new iPhone and the Square codes carry on. Without a backup, you'll add Square again on the new phone. Square says Manage two-step verification lets you add a different authentication app, without giving steps. The other documented route is to turn two-step verification off (below) and set it up again, while the old phone still shows codes. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
Square's recovery options depend on what you can still reach (Square):
- The phone number on file. On the sign-in page, select Having trouble verifying? and get a code by SMS or voice call.
- Neither your email nor your phone (US account owners only). Under Having trouble verifying?, choose Verify with photo ID, upload a government-issued ID that matches the name on the account, and take a selfie. Review takes 1–2 business days, then Square Support contacts you to set up a new email address and phone number.
- Square Support. If the self-serve options fail or you're outside the US, contact Square Support from squareup.com/help with your name and the account's email address. You need access to at least one contact method on file.
If you can't get a code at all, the setup article says to call Square Support (Square). In the US that's 1-855-700-6000, though phone support isn't guaranteed for every seller (Square). Square doesn't say how long a recovery through Support takes. More in Lost the phone with your authenticator app?
Turning two-step verification off
If team members are required to use it, turn that off first under My business > Security. Then open Sign in and security, select Manage two-step verification, then Turn off two-step verification. Enter a code, select Verify, and confirm with Turn off (Square).
