Tibia 2FA: how to set up an authenticator app

Before you start, find your Tibia recovery key. Tibia, the online role-playing game from CipSoft, won't link an authenticator app to your account until you type that key in, and the same key is what gets you out again if you ever lose the app (Tibia). Once the app is linked, Tibia asks for a code from it, on top of your email address and password, each time you log into the game or the Tibia website.

Tibia offers two kinds of two-factor authentication: a code sent by email, or a code from an authenticator app. An account can use only one of them at a time. Two-factor authentication is optional for most players, but you need one of the two to sell a character on the Char Bazaar (Tibia). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Tibia steps come from the Two-Factor Authentication and account recovery pages of Tibia's own support FAQ, linked below, which we read on October 21, 2026. We haven't tested them on a Tibia account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

What the recovery key does

Tibia hands out a recovery key once your account is confirmed. You need it both to connect an authenticator and to disconnect one. It can also change your account's email address instantly, as many times as it's used, so treat it like a password (Tibia).

Lost it? You can get a new one, free by email or text message if your account has a secondary email address or a mobile phone number registered. A letter to your registered postal address costs a fee (Tibia). Sort this out first.

Turn on 2FA with an authenticator app

Tibia's FAQ describes these steps (Tibia):

1. Log into your account on the Tibia website and open the Two-Factor Authentication section of your account page.
2. Find Connect your Tibia account to an authenticator app! and select Request.
3. Enter your recovery key.
4. Follow the steps Tibia shows. Its FAQ doesn't describe this screen.
5. If Tibia shows a QR code, open Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, screenshot it and use Choose a photo. See scanning a QR code on the same iPhone.
6. If Tibia gives you a key to type, tap +, then Enter key manually, and paste it into Setup key. Put "Tibia" in Service. See What is a 2FA setup key?
7. Enter the code Novaz shows to finish.

Tibia's FAQ doesn't say how many digits its codes have or how often they change, so scan the QR code if you get one: it carries those settings to the app.

Tibia also advises keeping the app on a different device from the one you play on, since an app on a compromised gaming computer protects nothing (Tibia). If you play on a computer, Novaz on your iPhone fits that advice.

If your account already uses email codes, Tibia's FAQ explains how to Deactivate them in the same section (Tibia). It doesn't say whether you have to do that before linking an app.

No backup codes

Tibia's FAQ doesn't mention backup or recovery codes. Your recovery key, or a one-time recovery TAN, is what removes the authenticator from your account. Unless you back up Novaz with iCloud backup or a backup file, its keys exist only on that iPhone, so the recovery key is your safety net: write it on paper and keep it away from your phone.

If Tibia rejects your code

Tibia says the most likely cause is a wrong time on your phone (Tibia). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off.

Tibia also accepts each code only once. If you just used one, wait for Novaz to show the next. More causes are in Authenticator code not working?

Moving to a new phone

Tibia's way is to unlink the old device, which needs your recovery key or a recovery TAN, and then connect the app on the new phone, which needs a valid recovery key (Tibia). Both steps are in the Two-Factor Authentication section of your account page. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead; without one, you'll add Tibia again there. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

You can remove a lost or broken authenticator yourself through Tibia's Lost Account Interface (Tibia):

1. Enter a character name or the account's email address.
2. Choose I want to remove an authenticator app from my Tibia account.
3. Enter your recovery key or a recovery TAN.

You can then link an authenticator on another device.

A recovery TAN works once, for one action, within 24 hours. Tibia texts it to your verified mobile number only when you order a new recovery key by letter (Tibia).

Lost the recovery key too? If your account has a secondary email address, a valid mobile number or a correct postal address, request a new recovery key, then remove the authenticator with it. If it has none of these, Tibia says to contact support, by ticket or at support@tibia.com if you can't log in, with as much detail about your account as you can (Tibia). Tibia doesn't say what proof it accepts or how long this takes. See also Lost the phone with your authenticator app?

Turning 2FA off

Use Unlink in the Two-Factor Authentication section of your account page. You need your recovery key or a recovery TAN for this (Tibia). Then open the Tibia account in Novaz and tap Remove account.

Official Tibia help

• Two-Factor Authentication
• Linking an Authenticator to an Account
• Unlinking an Authenticator
• Connecting Your Authenticator App to Another Device
• Authenticator Does Not Work
• Authenticator Device Lost or Broken
• Authenticator and Recovery Key Lost
• Recovery Key vs. Recovery TAN
• New Recovery Key Needed
• What are the requirements to sell a character?