ThreatConnect 2FA: how to set up an authenticator app

ThreatConnect is a threat intelligence and security operations platform. You don't sign up for it yourself: an administrator at your company creates your user account on your organization's ThreatConnect instance. ThreatConnect calls two-factor authentication "multi-factor authentication" (MFA), and the only method its help describes is a code from an authenticator app that supports time-based one-time passwords (TOTP) (ThreatConnect).

Two things set ThreatConnect apart. Your administrator may switch MFA on for everyone, in which case you can't turn it on or off yourself. And there's no self-service recovery: if you lose the app, an administrator has to reset it. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the ThreatConnect steps come from ThreatConnect's own knowledge base, linked below, including the screenshots in its My Profile article, which we read on October 24, 2026. We haven't tested them on a ThreatConnect account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Is MFA up to you?

It depends on how your instance is set up (ThreatConnect, ThreatConnect):

• Your administrator requires MFA for everyone. ThreatConnect asks you to set up an authenticator app the first time you sign in. The Authenticator tab then can't be used to turn MFA on or off. Administrators control this with a system setting called twoFactorAuthenticationRequired.
• MFA is optional on your instance. You turn it on yourself from My Profile, with the steps below.
• An administrator flagged your account. If an administrator selects Multi-Factor Authentication Reset Required on your account, you'll be asked to set up MFA the next time you sign in.

ThreatConnect's help only shows the setup window from My Profile, so the sign-in prompt may look a little different.

Turn on MFA with an authenticator app

ThreatConnect's knowledge base describes these steps (ThreatConnect):

1. Sign in to ThreatConnect. On the top navigation bar, hover over Settings and select My Profile.
2. Open the Authenticator tab. It should say Multi-factor authentication is not enabled for your account.
3. Click ENABLE. The Setup multi-factor authentication window opens with a QR code.
4. In Novaz, tap +, then Scan QR code, and point the camera at the code on your computer screen. If ThreatConnect is open on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
5. If you can't scan it, use the text key, which ThreatConnect labels Manual Key and shows next to a Copy Key button. In Novaz, tap +, then Enter key manually, and paste or type it as the Setup key. See What is a 2FA setup key?
6. Type the 6-digit code from Novaz into Verification Code and click Save and Verify.

The tab should now say Multi-factor authentication is enabled for your account.

ThreatConnect's help doesn't say how often its codes change. A typed key in Novaz always makes 6-digit codes every 30 seconds, while a QR code carries the service's own settings. So scan the QR code when you can, and if Novaz won't accept the typed key or the codes don't work, remove the account and scan instead.

No backup codes

ThreatConnect's knowledge base doesn't mention backup or recovery codes, and the setup window in its screenshot doesn't offer any. That makes the authenticator on your phone the only thing that gets you past the code prompt. Novaz's keys stay on that iPhone unless you turn on iCloud backup or export a backup file, so know who your ThreatConnect administrator is before you need them.

If ThreatConnect rejects your code

ThreatConnect's help has no advice for rejected codes. The usual cause is the phone's clock: on iPhone, go to Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

If you lose your authenticator

ThreatConnect's help is direct: ask your System or Organization Administrator to reset your MFA (ThreatConnect). The administrator does this by selecting Multi-Factor Authentication Reset Required on your user account, which is also the option the help names for a user who has lost their MFA token (ThreatConnect). The next time you sign in, ThreatConnect asks you to set up an authenticator app again.

The help doesn't say what proof your administrator will want or how long a reset takes. See also Lost the phone with your authenticator app?

Changing phones

ThreatConnect doesn't describe a phone switch. On an instance where MFA is optional, you can turn it off on the old phone and set it up again on the new one, as described here. Where MFA is enforced, ask an administrator for a reset. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. Either way, keep the old iPhone until the new one works. See How to transfer your authenticator app to a new iPhone.

Turning MFA off

If your instance doesn't enforce MFA, go to My Profile > Authenticator, click DISABLE, and click YES in the Remove Authenticator window (ThreatConnect). An administrator can also turn it off for a user from the Organization Settings screen, but not on instances where MFA is required for everyone (ThreatConnect). Once it's off, remove the account from Novaz: open it and tap Remove account.

Official ThreatConnect help

• My Profile
• Managing User Accounts