Skip to content
Novaz AuthenticatorGET

UserWay 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Before you start
  2. Turn on 2FA with an authenticator app
  3. Keep the backup codes
  4. Signing in with 2FA on
  5. Require 2FA for your whole team
  6. If UserWay rejects your code
  7. Moving to a new iPhone
  8. If you lose your authenticator
  9. Turning 2FA off
  10. Official UserWay help

Your UserWay account signs you in to the UserWay Dashboard at manage.userway.org, where you run the accessibility widget on your websites and handle billing and your team (UserWay). Two-factor authentication (2FA) is optional if you work alone. Teams are different: Team Management, where you invite people and set their permissions, only opens once 2FA is on for your account (UserWay).

UserWay has two methods: a one-time code sent to your registered email address, or an authenticator app, which UserWay calls virtual device authentication (UserWay). This guide sets up the second one with Authenticator App - Novaz on iPhone. Other authenticator apps take the same steps.

How we checked this guide: the UserWay steps come from UserWay's own help center articles and their screenshots, linked below, which we read on October 20, 2026. We haven't tested them on a UserWay account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Before you start

You'll need the inbox of the email address registered to your account. And if the account is about to change owners, wait: UserWay says to switch off every 2FA method before the owner or the owner's email changes, because the setup stays with the old owner's email and device (UserWay). Changing that email is how ownership moves (UserWay). The new owner then sets up their own.

Turn on 2FA with an authenticator app

The tab's name differs between UserWay's text and its screenshots. These steps follow the screenshots (UserWay):

  1. Sign in to the UserWay Dashboard at manage.userway.org.
  2. Click your profile icon in the upper-right corner, then My Account.
  3. Open the Enable Virtual Device 2FA tab and turn on the Enable virtual device authentication switch.
  4. A QR code appears. Add it to Novaz: tap +, choose Scan QR code, and hold the iPhone up to the screen. Working on the iPhone itself? Screenshot the code, then tap + and Choose a photo instead. See scanning a QR code on the same iPhone.
  5. Type the 6-digit code from Novaz into Verification Code.
  6. Fill in Device Name. The field is required, but any name will do; it's only a label for you.
  7. Click Next.
  8. Copy the one-time backup codes UserWay shows, then click Close.

UserWay's help only shows a QR code, with no text key to type instead. A red note under the switch reads "This action will reset your authentication app configuration" (UserWay), and the help doesn't explain it. If you ever switch it on again, make sure Novaz's new code is accepted before you delete the old UserWay entry.

Keep the backup codes

The screenshot shows six codes, each good for one use, and the screen tells you to write them down (UserWay). The help doesn't say whether you can view them again or get new ones, so save them right away, in a password manager or on paper. They matter most if you have no Novaz backup, since the keys then live only on your iPhone. More in 2FA backup codes.

Signing in with 2FA on

After setup, you sign in with your email address and password, then enter the current Novaz code whenever UserWay asks for additional verification (UserWay). The help doesn't say how often that is.

Require 2FA for your whole team

Account owners can make 2FA mandatory for team members, and so can members with the Manage Teams permission (UserWay):

  1. Open Team Management. UserWay's text puts it under the profile icon; its screenshots show it opening from your account name at the top of the left sidebar.
  2. On the Enforce 2FA card, turn on the switch and confirm if asked. A 2FA successfully enabled message appears.

Members then have to set up a 2FA method of their own, and the card warns that invited members without it can't reach your sites (UserWay). Each member has a personal UserWay user account (UserWay), so the steps above apply to them. UserWay also advises having 2FA in place before you create sub-accounts (UserWay).

If UserWay rejects your code

UserWay's help has nothing on rejected authenticator codes. Look at your iPhone's clock first: Settings > General > Date & Time > Set Automatically. If the time is 15 seconds or more wrong, Novaz tells you so. More causes are in Authenticator code not working?

Moving to a new iPhone

UserWay doesn't document moving the authenticator to a new phone. In Novaz, you can restore your accounts on the new iPhone from iCloud backup or a backup file. Without one, set UserWay up again on the new phone while the old one still works, and ask UserWay Support if you can't find how in My Account. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Sign in with one of your backup codes. If they're gone too, the route the help center gives is UserWay Support at desk@support.userway.org (UserWay). UserWay doesn't publish a 2FA recovery process, what proof it asks for, or how long it takes. More in Lost the phone with your authenticator app?

Turning 2FA off

UserWay gives no separate steps for this. Without 2FA, Team Management closes again, so you can't invite or manage team members (UserWay).

Official UserWay help

More guides: Business tools and other services