Skip to content
Novaz AuthenticatorGET

Twilio 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Turn on 2FA with an authenticator app
  2. One recovery code
  3. When Twilio asks for a code
  4. If Twilio rejects your code
  5. Changing phones
  6. If you lose your authenticator
  7. Turning 2FA off
  8. Official Twilio help

Your Twilio login opens the Twilio Console, where you manage your numbers, API keys and billing. You can't skip two-factor authentication (2FA) there. One Twilio article says it's required on every account; another says only free trial accounts can turn it off (Twilio, Twilio). Logins that use single sign-on don't get Twilio's own 2FA (Twilio).

Codes can come by text message, by voice call, or from an authenticator app. Twilio accepts any app that follows the TOTP standard, although its pages recommend Authy, Twilio's own app (Twilio). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Twilio steps come from Twilio's own help center articles, linked below, which we read on October 20, 2026. Twilio has separate articles for its legacy Console and its newer one, with different labels, so we give both. We haven't tested them on a Twilio account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Legacy Console (Twilio, Twilio):

  1. Click your name in the top right corner to open User Settings.
  2. Twilio first emails you a code. Enter it and click Verify.
  3. In the Two-factor authentication (2FA) section, click Edit.
  4. Click + Add authentication app. Twilio shows a QR code.
  5. In Novaz, tap +, then Scan QR code, and point the camera at the screen.
  6. Follow the instructions on the page, entering the 6-digit code from Novaz if asked, and click Verify and save.
  7. If you're turning on 2FA for the first time, Twilio shows a recovery code. Save it before you leave the page.

New Console (Twilio):

  1. Select Settings in the left sidebar, then Personal settings.
  2. Open the Login & security tab.
  3. Select Actions, then Add authenticator app for 2FA, and scan the QR code with Novaz.

Twilio doesn't document the screens after that menu. Once it's set, the tab lists Authenticator app as your 2FA delivery method.

Twilio's pages mention only a QR code, not a typed key. If the Console is on the same iPhone, take a screenshot and use Choose a photo in Novaz (how that works). If Twilio does show a key, use Enter key manually (about setup keys).

One recovery code

Twilio gives you a single recovery code, not a list, and won't show it again once you leave the page. It suggests storing it in a password manager (Twilio). If that phone is gone and you have no Novaz iCloud backup or backup file, this code is your way in.

To replace a lost or exposed code, click Generate new code in User Settings and confirm; the old one stops working (Twilio). In the new Console, it's one of the Actions on the Login & security tab (Twilio). Signing in with the code replaces it too: Twilio shows a new one, and you click I have safely recorded this code (Twilio). See 2FA backup codes.

When Twilio asks for a code

Depending on your account's security level, Twilio asks at every sign-in or only on unrecognized devices (Twilio). Remember This Browser for 30 Days on the code screen cuts the prompts, but Twilio may ask sooner if you clear cookies, use a private window, or don't sign in for seven days in a row (Twilio).

To make every browser ask again, select Actions > Forget all remembered browsers on the Login & security tab, then Yes, forget browsers (Twilio). The legacy Console has the same button on the Security page of User Settings (Twilio).

If Twilio rejects your code

Twilio suggests clearing your browser's cache and cookies, then retrying or switching to another method, such as a voice call (Twilio). Also check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when it's 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

You can't switch authenticator apps while signed out (Twilio), so move before you give up the old iPhone. In the new Console, select Actions > Delete authenticator app for 2FA, then Delete authenticator app. Codes go back to your phone number, and you can add the app again on the new iPhone (Twilio). The legacy Console articles don't cover removing the app. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead; see How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

  • Use a text or call. You can switch methods on the code screen (Twilio).
  • Use your recovery code. After your email and password, choose Try another method > Recovery code, enter it, and click Continue (Twilio).
  • Reset MFA. Owners of upgraded accounts (pay as you go, by card or PayPal) can use the Reset MFA link after signing in and confirm their account details (Twilio).
  • Ask your organization's admin. An admin or owner can reset 2FA for a managed user, who then sets it up again at the next sign-in (Twilio).
  • Contact Twilio Support. Otherwise, send a request through the Twilio Help Center for a manual identity check, with a valid email address and your Account SID (Twilio). Twilio doesn't say how long this takes.

Keep your Account SID with your recovery code. See also Lost the phone with your authenticator app?

Turning 2FA off

Paid accounts can't turn it off (Twilio). Deleting the authenticator app, as above, only moves your codes back to your phone. Then open Twilio in Novaz and tap Remove account.

Official Twilio help

More guides: Developer tools