Skip to content
Novaz AuthenticatorGET

Square Enix 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. Write down your Emergency Removal Password
  3. When Square Enix asks for a code
  4. If Square Enix rejects your code
  5. Changing phones
  6. If you lose your authenticator
  7. Turning 2FA off
  8. Official Square Enix help

Your Square Enix ID signs you in to FINAL FANTASY XIV, FINAL FANTASY XI and the Mog Station. Square Enix calls its optional two-factor authentication (2FA) a one-time password: a 6-digit code you enter after your password. It comes from a key-ring Security Token, from Square Enix's own Software Token app (closed to new users since November 21, 2023), or from a Software Authenticator, which is Square Enix's name for any standard authenticator app (Square Enix).

Know this first: Square Enix gives no backup codes. If you lose your phone and have no backup of your authenticator, your only way back in on your own is an Emergency Removal Password you must write down yourself.

This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Square Enix steps come from Square Enix's own support center and its FINAL FANTASY XIV Lodestone notices, linked below, which we read on October 19, 2026. We haven't tested them on a Square Enix account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

An account can have only one kind of one-time password, so remove a Security Token or Software Token first (Square Enix). A removed Security Token can't be used again (Square Enix).

Square Enix's support articles describe these steps (Square Enix, Square Enix). They word some steps differently, so labels may differ a little.

  1. Sign in to the Square Enix Account Management System at secure.square-enix.com.
  2. Under Services and Options, select One-Time Password. From the Mog Station, it's One-Time Password under Square Enix Account Settings.
  3. At the bottom of the page, select Software Authenticator (Google Authenticator, Microsoft Authenticator, etc.), then Software Authenticator Registration, and follow the steps until you see a QR code.
  4. In Novaz, tap +, then Scan QR code. If the QR code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
  5. If you can't scan it, select Unable to Scan QR Code to see the authentication key. In Novaz, tap +, then Enter key manually. Type Square Enix as the Service, your Square Enix ID as the Account, and the key as the Setup key. See What is a 2FA setup key?
  6. Select Next, type the 6-digit code from Novaz, and select Next again.

Square Enix doesn't say how often its codes change or how long the key is. Novaz needs a typed key of at least 16 characters, so if it won't take the key, scan the QR code instead.

Write down your Emergency Removal Password

The Emergency Removal Password lets you take the authenticator off your account yourself when you can't sign in with a code (Square Enix). You can only see it while signed in, under Token Usage Status below the Square Enix Account Information section (Square Enix). Note it right after setup and keep it off your phone. Keep it even if you back up Novaz: it's your way in if the phone is gone and you have no iCloud backup or backup file, or yours is out of date. It works only once: after you use it or register again, you get a new one to write down.

When Square Enix asks for a code

Every sign-in asks for your Square Enix ID, password and a code from the app (Square Enix). Square Enix's pages don't mention trusted devices.

  • FINAL FANTASY XIV: a 2021 announcement says signing in with a one-time password lets you pick one aetheryte as a free teleport destination. Without the one-time password, teleports there cost gil (Square Enix).
  • FINAL FANTASY XI: turn on the one-time password in the PlayOnline Viewer, through Settings in Member List (Square Enix).

If Square Enix rejects your code

Square Enix's help doesn't cover rejected authenticator codes. Check the iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz also warns you when your clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

While you still have the old phone, sign in with a code from it, open One-Time Password, select Software Authenticator Removal, then register again with the new phone (Square Enix). In Novaz, iCloud backup or a backup file lets you restore your accounts on the new iPhone instead, with the same codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Until the authenticator is removed, Square Enix says you can't use the games and services on that account (Square Enix). With the Emergency Removal Password:

  1. On the emergency removal page, enter your Square Enix ID, Square Enix Password and Emergency Removal Password, then select Send Mail.
  2. Square Enix emails a link to the address on your account. It stops working after 60 minutes (Square Enix).
  3. Opening the link removes the authenticator. Sign in, set up Novaz again, and note the new Emergency Removal Password.

Without it, the account holder must contact the Square Enix Support Center through its support form (Square Enix). Support removes the authenticator once it has confirmed the account is yours (Square Enix), but Square Enix doesn't say what proof it asks for or how long it takes. More in Lost the phone with your authenticator app?

Turning 2FA off

Sign in, select One-Time Password under Services and Options, then Software Authenticator Removal. Sign-ins then stop asking for a code (Square Enix).

Official Square Enix help

More guides: Gaming and betting