ThriveCart 2FA: how to set up an authenticator app

ThriveCart is the cart and checkout platform many creators use to sell courses, digital products and subscriptions, so a ThriveCart login can reach your sales, customers and refunds. Its two-factor authentication (2FA) has one method only: a 6-digit code from an authenticator app. ThriveCart is direct about it: "You must use an app based authenticator to enable 2FA" (ThriveCart). There are no text-message or email codes to fall back on, which shapes how you should plan for a lost phone. This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the ThriveCart steps come from ThriveCart's own help article, linked below, which we read on October 21, 2026. We haven't tested them on a ThriveCart account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Is 2FA required?

ThriveCart's help doesn't say it's mandatory. New accounts are offered the setup during sign-up and can skip it. ThriveCart recommends it for the account owner and also asks that everyone with access to your account turn it on for their own personal login (ThriveCart). If you've given assistants or clients their own sub-user logins, that means each of them sets up 2FA on their own phone. They don't share yours.

Turn on 2FA with an authenticator app

If you're signing up

During sign-up, ThriveCart shows a two-factor step. Choose Set up two-factor now and a QR code appears. If no QR code shows up, choose Continue without two-factor and use the profile steps below instead (ThriveCart).

If you already have an account

1. In the left-hand sidebar, click Account, then My profile.
2. Scroll to the bottom of the profile page.
3. Click Set up 2-factor auth. ThriveCart shows a QR code (ThriveCart).
4. In Novaz, tap +, then Scan QR code, and point the camera at the code on your computer screen. If you opened ThriveCart on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Novaz adds the account and starts showing 6-digit codes. ThriveCart's article ends at the QR code, so it doesn't describe a confirmation screen. If ThriveCart asks for a code to finish, type the one Novaz shows now.

ThriveCart's article only talks about scanning. It doesn't mention a text key you could type by hand, so plan to scan. The codes it describes are 6 digits and change every 30 seconds.

One warning from the same article: if you scan the QR code with the iPhone's Camera app instead of an authenticator app, the code may end up in the phone's passwords area rather than in your app (ThriveCart). If your codes seem to be missing, look there. The differences are in Apple Passwords vs an authenticator app.

When ThriveCart asks for a code

Once 2FA is on, ThriveCart asks for the 6-digit access code every time you log in. Open Novaz, find the ThriveCart entry and type its current code.

At the code prompt you can tick a box so this computer isn't asked again for 30 days. ThriveCart explains that this is stored in your browser. Clearing cookies or cache, or signing in from another browser or device, brings the code prompt back (ThriveCart).

No backup codes mentioned

ThriveCart's help says nothing about backup or recovery codes, and since SMS and email codes aren't offered, there's no second method either. The article's advice for a lost phone leans on authenticator apps that sync to an online account. Novaz has no online account, but it can keep a copy through iCloud backup or a backup file you export. Without one, its keys stay on that iPhone and your fallback is ThriveCart support (below), so keep the old phone until you've moved 2FA to a new one.

If ThriveCart rejects your code

ThriveCart's help doesn't cover rejected codes. The usual cause is the phone's clock. On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones or apps

To move to another authenticator app or phone, ThriveCart's way is to remove 2FA on the My profile page, then turn it back on and scan the new QR code with the new app (ThriveCart). Do it while the old phone still works. If you're staying with Novaz, an iCloud backup or backup file lets you restore your accounts on the new iPhone instead; without one, a new iPhone means scanning a fresh QR code. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

ThriveCart first suggests recovering your codes through your authenticator app's own account, which doesn't apply to Novaz, since it has no account. The closest thing is restoring a Novaz iCloud backup or backup file, if you made one. If you're still locked out, email ThriveCart support at support@thrivecart.com. ThriveCart says it will take you through additional account security checks (ThriveCart). It doesn't say what proof those checks ask for or how long they take. Write from the email address on your account if you can. More in Lost the phone with your authenticator app?

Turning 2FA off

You remove 2FA from the My profile page, the same place you turn it on (ThriveCart). The article doesn't name the button. After that, in Novaz, open the ThriveCart entry and tap Remove account.

Official ThriveCart help

• Two-Factor Authentication (2FA): Setup & FAQ