Skip to content
Novaz AuthenticatorGET

University of Cambridge MFA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Add an authenticator app in My Sign-ins
  2. Your second method is the backup
  3. When Cambridge asks for a code
  4. If Cambridge rejects your code
  5. Moving to a new iPhone
  6. If you lose your authenticator
  7. Official University of Cambridge help

Your University of Cambridge account, formerly called Raven, is your CRSid and the one password for @cam email, Microsoft 365, Moodle, CamSIS and other University sites (Cambridge). Since February 14, 2023, Raven sites use the same Microsoft sign-in as your @cam email, so multi-factor authentication (MFA) covers them too (Cambridge). MFA isn't optional: University Information Services (UIS) requires you to set up sign-in methods, or second factors (Cambridge).

You can use an authenticator app, a text or WhatsApp code, a phone call, a passkey or security key, or, if eligible, a UIS hardware token. The screens call the app option Microsoft Authenticator, but UIS says that's "just the label for the authentication app method" (Cambridge). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the University of Cambridge steps come from the UIS help site, linked below. That site blocked our automated reader, so on October 19, 2026 we read archived copies on web.archive.org, saved between March 2025 and August 2026. We haven't tested the steps on a Cambridge account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Add an authenticator app in My Sign-ins

These steps follow UIS's newest Microsoft Authenticator page (Cambridge). Use a computer if you can, so the QR code isn't on your iPhone's own screen.

  1. Sign in to My Sign-ins (mysignins.microsoft.com/security-info) with CRSid@cam.ac.uk.
  2. Choose Add sign-in method, then select Microsoft Authenticator.
  3. Select I want to use a different authenticator app, the path UIS gives for Google Authenticator and other apps.
  4. When a QR code appears, open Novaz, tap +, then Scan QR code. If it's on your iPhone's screen, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
  5. To type the key instead, copy the secret key from the Set up your account screen, as UIS's older Twilio Authy guide does (Cambridge). In Novaz, tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
  6. Type the code Novaz shows when the page asks for it, and finish the prompts.

The Authy guide uses 6-digit codes, but UIS doesn't say how often they change, so scan the QR code if you can: it carries those settings.

To be asked for a Novaz code first, select Change next to your default method, choose the app, and select Confirm (Cambridge).

New to Cambridge?

Your first Microsoft 365 sign-in starts the setup: select Next on More information required (Cambridge). The screen asking you to download Microsoft Authenticator has the same I want to use a different authenticator app link; then follow steps 4 to 6. A phone number comes next, for calls, texts or WhatsApp codes (Cambridge).

Your second method is the backup

UIS's pages don't mention backup codes. Instead, UIS wants more than one method and suggests the app on both a phone and a tablet (Cambridge), but Novaz keys stay on your iPhone unless you turn on iCloud backup or export a backup file, so keep a phone number as your backup too.

That pair also lets you reset a forgotten password yourself, which takes two of three methods: a phone number, an authenticator app, or a UIS hardware token. Passkeys and security keys don't count (Cambridge).

When Cambridge asks for a code

UIS lists a new browser session, a new device, changing or recovering your password, and adding your @cam email to a new mail app. The University VPN can trigger one too, as it looks like a new location (Cambridge). Type the code without spaces and select Verify (Cambridge).

In 2023, UIS said sites open to Raven for Life users would keep the old Raven screen with no second factor (Cambridge).

If Cambridge rejects your code

UIS's pages don't cover rejected app codes. Check your iPhone's clock first: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Moving to a new iPhone

UIS's rule: set up the app on the new device before you delete it from the old one (Cambridge). If you restore Novaz on the new iPhone from iCloud backup or a backup file, your existing entry keeps working. Without a backup, add the new iPhone as a new app entry in My Sign-ins, test it, then delete the old entry. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with your phone number, delete the old app entry in My Sign-ins, and add Novaz again. With no other method, contact the UIS Service Desk (Cambridge):

  • Live chat: 24 hours a day on the UIS help site (accept all cookies to see it).
  • Phone: 01223 332999, if the other routes don't work.
  • Email: servicedesk@uis.cam.ac.uk, read 08:30 to 17:00.

Be ready to give your CRSid, full email address, date of birth, current College or department, and the year you joined (Cambridge). UIS doesn't say how long a reset takes. More in Lost the phone with your authenticator app?

You can't turn MFA off on a University account, but you can delete individual methods in My Sign-ins (Cambridge).

Official University of Cambridge help

More guides: Universities and education