Tito 2FA: how to set up an authenticator app

Tito is the ticketing platform event organizers use to sell tickets, run check-in and manage attendees. You need a Tito account only if you organize events: attendees can book without one (Tito). If that account holds your events, payouts and attendee data, two-factor authentication (2FA) is worth the minute it takes.

Tito keeps its 2FA simple. There are no codes by text message or email: the only method is an authenticator app on your phone (Tito). One detail catches people out, though. Tito doesn't hand you recovery codes when you turn 2FA on. You have to create them yourself, and if you skip that step and lose your phone, you're locked out until support verifies who you are.

This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Tito steps come from Tito's own help center, linked below, which we read on October 21, 2026. We haven't tested them on a Tito account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Tito's help article describes these steps (Tito):

1. Sign in to Tito on a computer.
2. Open the menu under your avatar at the top right and choose Edit Profile. A screenshot in Tito's article shows the label as Edit your profile, so look for either. Your profile also lives at id.tito.io/profile (Tito).
3. Click Two-Factor Authentication, then Enable.
4. Tito shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Type the 6-digit code from Novaz into the field and click Enable.

Tito's article doesn't mention a text key you could type instead of scanning, so plan on scanning the QR code. If Tito does show one, tap +, then Enter key manually in Novaz, and paste it as the Setup key. See What is a 2FA setup key?

Create your recovery codes right away

This is the step to do before you close the page. Tito says plainly that without recovery codes, losing your authenticator app means losing your account, and it recommends creating them (Tito).

1. Go back to the Two-Factor Authentication section of your profile.
2. Click Create recovery codes.
3. Tito shows 5 codes, and only once. Copy them somewhere safe that isn't your phone, such as a password manager or a printout.
4. Click I have copied the recovery codes.

Each code works once, in place of a code from your app. If you create a new set, every older code stops working, including ones you never used. That's useful if you think someone saw your codes, but it means you must save the new set straight away.

Novaz can keep a copy of its keys through iCloud backup or a backup file, but these 5 codes still get you in if the phone is lost without one, or if your backup is older than your Tito setup. More in 2FA backup codes.

Signing in with 2FA on

Once 2FA is on, Tito asks for a code every time you sign in. You enter your email address, your password, and then the code from your app (or a recovery code), and click Verify code (Tito). Tito's article doesn't mention trusted devices or a way to skip the code on a familiar computer.

2FA is set per person. Tito's team article covers inviting colleagues and their access levels, but doesn't say an account owner can require 2FA for the team (Tito). Each team member turns it on in their own profile.

If Tito rejects your code

Tito's help doesn't cover rejected codes. The usual cause is the iPhone's clock. Open Settings > General > Date & Time and turn on Set Automatically. Novaz also warns you when the clock is 15 seconds or more off. Check, too, that you're reading the Tito entry in Novaz and not another account. Other causes are in Authenticator code not working?

Moving to a new phone

Tito doesn't describe a way to move 2FA to a new phone. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone and keep the same codes. Without one, the safe way is to do it while you still have the old phone: turn 2FA off (below), turn it on again, and scan the new QR code with the new phone. Then create a fresh set of recovery codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your recovery codes, then turn 2FA off and on again to link a new phone.

If you have no recovery codes, Tito's support team is the only route. Tito says it will take you through an identity verification process before letting you back in, but doesn't say what proof it asks for or how long it takes (Tito). Its help center says support answers messages by email or in the app by the next working day. More in Lost the phone with your authenticator app?

Turning 2FA off

Open Edit Profile from the menu at the top right, click Two-Factor Authentication, then Disable. After that you sign in with only your email address and password (Tito). In Novaz, open the Tito entry and tap Remove account so you don't keep a dead code.

Official Tito help

• Two-Factor Authentication
• How do I register a Tito account?
• How do I reset my password?
• Adding your team