Tokopedia 2FA: how to set up an authenticator app

Tokopedia is an Indonesian online marketplace for shopping and selling. Its help center, Tokopedia Care, lists three optional security features: a PIN for payments, Google Authenticator, and SMS sign-in alerts called Lapor Aktivitas Login (Tokopedia). Tokopedia names Google Authenticator, but setup uses an ordinary QR code and key. This guide uses Authenticator App - Novaz on iPhone; any authenticator app works the same way. Tokopedia's help is in Indonesian, so labels appear in Indonesian, with a translation where it helps.

How we checked this guide: the Tokopedia steps come from Tokopedia's own help center, linked below. tokopedia.com turned away our automated reader, so on October 21, 2026 we read the pages as archived copies on web.archive.org, saved between September 2024 and September 2026. The setup article's copy is from March 9, 2026, and its screenshots are older. We haven't tested the steps on a Tokopedia account, so a label may differ. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Tokopedia's setup article describes the website, so a computer is easiest: your iPhone scans the QR code on the screen. Have your phone number ready too, because the last step sends a one-time code to it (Tokopedia):

1. Sign in on tokopedia.com. Move the pointer over your profile icon at the top right and choose Pengaturan (Settings).
2. On your profile page, open the Google Authenticator tab, the last one after Biodata Diri in Tokopedia's screenshot.
3. Click Aktifkan Google Authenticator (Turn on Google Authenticator).
4. The Aktivasi Google Authenticator page shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at the screen. If the page is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
5. Can't scan it? Under the QR code, the screenshot shows Tidak bisa scan? Coba masukkan kode secara manual (Can't scan? Try entering the code manually), with the key below it. In Novaz, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
6. Type the 6-digit code from Novaz into the Kode Autentikasi box and select Verifikasi.
7. Choose SMS or WhatsApp. Type the one-time code Tokopedia sends you and click Verifikasi.

Tokopedia doesn't say how often its codes change, so scan the QR code if you can: it tells Novaz the settings. A typed key gives 6-digit codes every 30 seconds.

What changes afterwards

Tokopedia's screenshots pitch the authenticator as a way to pass security checks without waiting for an SMS, but don't list which checks accept it. The sign-in help only says you pick a verification method and type the code (Tokopedia).

Your phone number still matters. The setup article says Tokopedia texts you whenever someone tries to sign in once activation is done. A sign-in on a new device also brings an SMS linking to Lapor Aktivitas Login (Report sign-in activity), where Ya, Ini Saya (Yes, it's me) lets it continue and Ini Bukan Saya (It's not me) blocks it (Tokopedia).

The PIN Tokopedia is something else: a number you type to confirm payments, not to sign in (Tokopedia).

No backup codes

Tokopedia's help doesn't mention backup or recovery codes. Unless you back up Novaz with iCloud backup or a backup file, its keys exist only on that iPhone, so keep the phone number on your account active: Tokopedia's documented recovery routes depend on it or on Tokopedia Care.

If Tokopedia rejects your code

Tokopedia's help doesn't cover this. Check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when it's 15 seconds or more off. Also make sure you're typing the Novaz code, not one from an SMS or WhatsApp message. More causes are in Authenticator code not working?

New phone, or turning it off

Tokopedia's help doesn't describe moving the authenticator or turning it off. Before you give up your old iPhone, check the Google Authenticator tab in Pengaturan, and ask Tokopedia Care if it offers no way to switch. With a Novaz iCloud backup or backup file, you restore your accounts on the new iPhone and Tokopedia's codes keep working; without one, a new phone means setting Tokopedia up again. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Tokopedia doesn't document a reset for the authenticator itself. Its lost-phone article offers to deactivate your account temporarily, through Tokopedia Care (Tokopedia):

• Signed in on another device: open that article in the Tokopedia app, tap Mulai Chat and explain what happened.
• Can't sign in: tap Tulis Kendala (Describe the problem) on the same article, fill in the form and tap Kirim.

If the lost phone also had your Tokopedia number's SIM, the sign-in screen has Nomor Saya Sudah Tidak Aktif (My number is no longer active). After Lanjut Ubah, you upload a photo of your KTP (Indonesian ID card) or another ID, a selfie holding it, and a new number, then tap Upload Data (Tokopedia). Tokopedia says to allow 24 hours before contacting Tokopedia Care (Tokopedia). Its pages don't say whether this also clears the authenticator.

More in Lost the phone with your authenticator app?

Official Tokopedia help

Read as archived copies on web.archive.org:

• Bagaimana Cara Mengaktifkan Fitur Keamanan Akun? (saved March 9, 2026)
• Cara Login Akun Tokopedia (saved April 12, 2026)
• Cara Amankan Akun Tokopedia Saat Kehilangan HP (saved April 12, 2026)
• Saya Ingin Ubah Nomor Handphone yang Tidak Aktif (saved September 1, 2026)
• PIN Tokopedia (saved September 12, 2024)