Webflow 2FA: how to set up an authenticator app

Your Webflow account is the login behind your sites, Workspaces and plans. Two-factor authentication (2FA) is optional, and Webflow offers it whatever Workspace plan you're on (Webflow). Webflow's help describes one method, an authenticator app, backed up by eight single-use codes, and doesn't mention text messages. The steps below use Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Webflow steps come from Webflow's own help center and product updates page, linked below, which we read on October 20, 2026. We haven't tested them on a Webflow account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Webflow's 2FA article gives this order (Webflow). The backup codes come up before you confirm, so have somewhere ready to store them.

1. Sign in to Webflow and click the Account dropdown menu in the navbar.
2. Go to Account settings, then the Security tab.
3. Click Enable two-factor authentication.
4. Webflow shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at your computer screen. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
5. Save the backup codes Webflow shows. You won't get to see them again.
6. Type the 6-digit code that Novaz shows under Webflow, then click Confirm code.

Webflow's help doesn't mention a text key to type instead of scanning. If the screen offers one, tap + in Novaz, then Enter key manually, and paste it into Setup key. Webflow's codes are 6 digits every 30 seconds (Webflow), which matches a typed key in Novaz. See What is a 2FA setup key?

Eight backup codes, shown once

Webflow gives you 8 backup codes during setup, and each works once (Webflow). You can't view them again later. The only documented way to get a fresh set is to turn 2FA off and on again, which needs you signed in.

Keep them even if you back up Novaz: they get you in if the phone is lost and your Novaz backup is missing or older than this account. Store them in a password manager or on paper, away from the phone, and renew them before the last one is gone. See 2FA backup codes.

Add a secondary email while you're there

Webflow lets you add a second email address that helps you get back in if you lose both your authenticator and your backup codes (Webflow). Find it under Account settings > Email & notifications > Secondary email address, click Add secondary email, then Add email, and confirm the message Webflow sends to that address. It can't be used to sign in or reset your password, and it can't belong to another Webflow account.

When Webflow asks for a code

• Every sign-in. Webflow's announcement of the feature says you'll enter a code each time you log in (Webflow). Its help doesn't mention an option to remember a device.
• Changing your account email (Webflow) or your secondary email (Webflow).
• Turning 2FA off (below).

If you sign in with Google, Webflow's 2FA article doesn't say whether its code step applies to that sign-in.

If Webflow rejects your code

Webflow notes that an expired code won't be accepted (Webflow), so if the code in Novaz is about to change, wait for the next one. If fresh codes still fail, check the iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

Webflow's help doesn't cover moving to a new phone. Using the steps it does document: turn 2FA off with a code from the old phone, then turn it on again and scan the new QR code with the new phone, which also gets you new backup codes. Don't wipe the old one first. If you have a Novaz iCloud backup or backup file, you can restore it on the new iPhone instead and keep the same codes. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

Try these in order (Webflow):

1. A backup code at the sign-in prompt.
2. Your secondary email, if you're still signed in. On a device where Webflow is still signed in, go to Account settings > Security > Disable two-factor authentication, click Verify via email, and finish the check in both your primary and secondary inboxes (Webflow).
3. Webflow Support. Open the Account Recovery Helper and choose I lost access to my 2FA device. A chatbot takes you through the next steps.

Support needs you to have access to your primary email, Webflow's main proof of ownership (Webflow). If you've lost that too, support may be able to check your identity against the billing details on file (Webflow). Webflow doesn't say how long recovery takes. More in Lost the phone with your authenticator app?

Turning 2FA off

While signed in, open the Account dropdown, go to Account settings > Security, and click Want to disable it? in the Two-factor authentication section. Enter a current code and click Confirm code (Webflow). Once 2FA is off in Webflow, open the Webflow entry in Novaz and tap Remove account.

Official Webflow help

• Two-factor authentication (2FA)
• I can't log in to my Webflow account
• How to add a secondary email address to your Webflow account
• Keep your Webflow account secure
• How to change your email address(es) for your Webflow account
• I can't access the email associated with my Webflow account
• Customer Support Policy
• Two-factor authentication (Webflow Updates)
• Account Recovery Helper