Vivup 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Vivup is the employee benefits portal many UK employers use for schemes such as cycle to work, home and electronics, gym memberships and discounts. Your Vivup account holds your personal details, salary information and order history, so Vivup has made multi-factor authentication (MFA) mandatory for everyone who signs in with an email address and password (Vivup).
You get two choices for the second step: a code sent to your email address, or a code from an authenticator app. This guide covers the authenticator app, using Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Vivup steps come from Vivup's own help center, linked below, which we read on October 21, 2026. We haven't tested them on a Vivup account, and Vivup's help describes the setup only in outline, so the screens you see may have labels this guide doesn't mention. The Novaz steps are checked against the app, version 1.0.5.
Is MFA required?
Yes, unless your employer signs you in with single sign-on (SSO). Vivup's MFA article, last updated April 28, 2026, says that from April 2 you're asked to set up MFA when you log in, and that skipping it only brings the prompt back next time. Once the deadline shown on your screen passes, you can't use the platform until you finish the setup. Access returns as soon as you do (Vivup).
If you sign in through SSO, Vivup doesn't ask for its own MFA at all. Your organization's identity provider handles it, and your HR or IT team can tell you whether that applies to you.
Turn on 2FA with an authenticator app
You can set it up the first time Vivup prompts you, or switch to it later (Vivup).
At the sign-in prompt:
- Sign in at vivup.co.uk/users/sign_in with your email address and password (Vivup).
- When Vivup asks you to choose a verification method, choose Authenticator app rather than Email verification code.
- Complete the verification with your authenticator app (see the Novaz steps below).
If you already use email codes:
- Go to My Account.
- Open your security settings.
- Select the authenticator app as your MFA method.
In Novaz: tap +, then Scan QR code, and point the camera at the code Vivup shows. If the code is on the same iPhone you're using, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone. Then type the code Novaz shows into Vivup.
Vivup's help doesn't say whether it also shows a text key you can type, or how many digits its codes have. If you do get a key, tap +, then Enter key manually in Novaz, and paste it as the Setup key (what a setup key is). Scanning the QR code is the safer route, since it carries the exact code settings.
When Vivup asks for a code
After you pass MFA on a device, Vivup trusts that device for 7 days and doesn't ask again during that time. After 7 days you verify again. Vivup says this works the same on the web and on mobile (Vivup).
No backup codes
Vivup's help doesn't mention backup or recovery codes. It describes picking one preferred method, either email codes or an authenticator app. If you lose the phone and have no Novaz backup (iCloud backup or a backup file) to restore, you'll have to go through Vivup support (below), so keep access to the email address on your account. For the trade-offs between the two methods, see authenticator app vs. text codes.
If Vivup rejects your code
Vivup's help doesn't cover rejected codes. The most common cause is the iPhone's clock: open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Make sure you're typing the code from the Vivup entry in Novaz, not another account. More in Authenticator code not working?
Changing phones
Vivup lets you switch between email codes and an authenticator app at any time from My Account (Vivup). Before you give up the old phone, switch to email codes, then set up the authenticator app again on the new one. If you have a Novaz iCloud backup or backup file, restoring it on the new iPhone brings your Vivup codes back without that switch. See How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
If you can't get into your email or your authenticator app any more, Vivup says you have to contact support to get back into your account (Vivup). Its help center points people with account questions to the Perkbot chatbot on the Vivup website (Vivup, Vivup). Vivup doesn't say what proof it asks for to reset MFA or how long that takes. Have the email address registered to your account and your employer's name ready.
If a device is still within its 7-day trusted window, you may still be signed in there. Use it to switch to email codes from My Account before the window runs out.
More in Lost the phone with your authenticator app?
Turning MFA off
You can't. MFA is mandatory for email and password sign-ins, so the only choice is which method you use.
