Xink 2FA: how to set up an authenticator app

Xink is a platform for managing a company's email signatures in Microsoft 365, Google Workspace and Outlook. Only administrators sign in to the Xink portal; employees just get the signatures it pushes out (Xink). Xink calls its two-step sign-in multi-factor authentication (MFA), and it works with any time-based (TOTP) authenticator app (Xink). It's optional: Xink lists it as an extra layer next to password policies and forced resets (Xink).

What's unusual is the order. An Account Administrator first sets a policy for the whole Xink account, and each admin then links an app the next time they sign in. This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Xink steps come from Xink's own help center, including the screenshots in its articles, which we read on October 21, 2026. We haven't tested them on a Xink account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Step 1: set the account policy

Only Account Administrators, the highest admin role in Xink, can open Preferences (Xink). If you're a Signature, Marketing or People Administrator, ask an Account Administrator to do this part.

1. Open Preferences (the gear icon), stay on the General tab and select Security.
2. Under Multifactor authentication policy for account, pick one of three settings (Xink):
   • Disabled, the default: no MFA.
   • Allowed: MFA is optional.
   • Enforced: everyone must use it. Admins who haven't set it up yet are sent to setup at their next sign-in.
3. Select Save.

Step 2: link your authenticator app

Xink's help article shows setup happening on a screen called Logon Options that appears when you sign in. When the policy is Enforced, that screen tells you your account administrator has made MFA mandatory. With Allowed, the article doesn't say where to start. Xink's single sign-on article opens a page with the same name, Logon Options, from the menu under your name (Xink), so look there.

1. Sign in to the Xink portal. On Logon Options, select Start.
2. Under Enabling TOTP, Xink shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the QR code is on the same iPhone, take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
3. If you can't scan it, use the text key Xink prints under the QR code as Or type the secret manually. In Novaz, tap +, then Enter key manually, type a name such as Xink in Service, your admin email in Account, and the secret in Setup key. See What is a 2FA setup key?
4. Select Proceed and type the code from Novaz to finish.

Xink doesn't say how many digits its codes have or how often they change, so scanning the QR code is the safer choice: it carries those settings to your app.

Admins who sign in with Microsoft

An Account Administrator can link an admin login to Microsoft Entra ID, and can turn on Force Azure AD Open ID so that every admin must sign in with Microsoft. That setting turns off sign-in with a Xink username and password (Xink). Xink's MFA article doesn't say whether its own code is still asked for in that case, so check with whoever runs your company's Microsoft accounts.

Xink also has an admin app for iPhone and iPad that takes your Xink admin sign-in (Xink). Its help page doesn't mention MFA.

No backup codes

Xink's help doesn't mention backup or recovery codes, and it doesn't describe how to reset or turn off your own authenticator setup. Unless you've made a Novaz backup (iCloud backup or a backup file), its keys exist only on that iPhone, so it's your only source of codes. Xink also doesn't say whether another Account Administrator can clear your setup, or whether moving the policy back to Disabled does.

If Xink rejects your code

Xink's help has no advice on rejected codes. The usual cause is the phone's clock: on iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns you when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?

Lost your phone or getting a new one

For a lost phone, Xink's MFA article only links to Google's and Microsoft's help for their own authenticator apps. It describes no Xink recovery route. Unless you can restore Novaz from iCloud backup or a backup file, your option is Xink support: its contact page lists support@xink.io and says the team works 24 hours a day, 5 days a week (Xink). Xink doesn't say what proof it asks for or how long a reset takes. See also Lost the phone with your authenticator app?

Moving to a new iPhone is simpler with a Novaz iCloud backup or backup file: restore your accounts on the new iPhone and the Xink codes keep working. Without one, Xink documents no way to re-link the app yourself, so keep the old phone until support has helped you set up the new one. See How to transfer your authenticator app to a new iPhone.

Official Xink help

• Enable MFA in Xink with TOTP Apps
• How to manage role-based admin access
• Enable SSO for Xink Admins with Entra ID
• Xink Security Overview and Data Protection Practices
• How does Xink handle data security and employee information?
• Xink Admin App for iPhone and iPad
• Contact Us for Email Signature Management Solutions