Yclas 2FA: how to set up an authenticator app
By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5
On this page
Yclas builds and hosts classifieds marketplaces. If you run a Yclas site, you have two accounts, each with its own two-step login. Your Yclas account, the one you sign in to at yclas.com, owns your sites and pays for them. Your administrator account on the marketplace itself is a separate account, with a separate setting (Yclas). Members of a Yclas marketplace have only that second kind.
Both use six-digit codes from an authenticator app. Neither is required, though Yclas strongly recommends it for administrators and moderators (Yclas). Marketplaces can also text codes, through a paid SMS service the owner sets up (Yclas). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.
How we checked this guide: the Yclas steps come from Yclas's own Help Centre, linked below, which we read on October 21, 2026. We haven't tested them on a Yclas account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.
Your yclas.com account
Protect this one first: anyone who gets in can open the admin panel of every site you run (Yclas).
- Sign in at yclas.com and click Edit profile in the top menu.
- In the Two-step login section, click Turn on.
- Yclas shows a QR code. In Novaz, tap +, then Scan QR code, and point the camera at it. If the code is on the same iPhone, take a screenshot and use Choose a photo instead. See scanning a QR code on the same iPhone.
- Type the code Novaz shows and confirm.
From then on, yclas.com asks for a code after your password at every sign-in. The help page doesn't mention a text key, backup codes or trusted devices for this account.
Your account on a Yclas marketplace
On a marketplace, the setting only appears if the site has it switched on. Yclas says new sites have it on already. A site owner can check under Add-ons > Google Authenticator, where Enable Google Authenticator must be ticked (Yclas). Then, as an administrator or a member:
- Sign in on the site's front end and open Edit profile from your account menu.
- Find the 2 Step Authentication section and scan its QR code with Novaz: tap +, then Scan QR code.
- Click Enable.
- Type the six-digit code from Novaz into Verification Code and click Verify. You should see a message that 2 Step Authentication is enabled.
From then on, after your email and password, the site shows a 2 Step Authentication page. Type the current code and click Verify. Yclas says you're asked again each time you sign in after signing out (Yclas).
Save the text key: it's your backup
Yclas's help doesn't mention backup codes for either account. What a marketplace account does have is a text key. Once two-step login is on, the profile section shows it under the QR code, labeled Google Authenticator Code. Yclas suggests keeping it somewhere safe, such as a password manager, because it lets you add the account to a new phone on your own (Yclas).
Without a Novaz backup (iCloud backup or a backup file), the key exists only on that iPhone, so save it. To add it, tap +, then Enter key manually, and paste it into Setup key. Yclas codes are six digits and change every 30 seconds, which is what Novaz uses for a typed key. Novaz needs a key of at least 16 characters, so if yours is shorter, scan the QR code instead. More in What is a 2FA setup key?
If Yclas rejects your code
Yclas's own advice: make sure your phone sets its clock automatically, and try the newest code (Yclas). On iPhone, that's Settings > General > Date & Time > Set Automatically. Novaz warns when the clock is 15 seconds or more off. Other causes are in Authenticator code not working?
Changing phones
For a marketplace, add the saved Google Authenticator Code to the new phone, or click Disable in 2 Step Authentication and set it up again. For yclas.com, the help only documents Turn off in Two-step login, so turn it off and on again before you give up the old phone. With a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead: see How to transfer your authenticator app to a new iPhone.
If you lose your authenticator
It depends on which account you're locked out of (Yclas):
- Site owner, locked out of your marketplace: sign in at yclas.com, go to My sites and click Open admin next to your site. You land in the admin panel without a code. Switch two-step login off on your profile and set it up again. If that fails, open a ticket from your yclas.com account.
- Member or team member: a site administrator can go to Users, edit your account, open Advanced, empty the Google Authenticator field and click Submit. You then sign in with your password and set it up again (Yclas).
- Your yclas.com account: the help doesn't describe this case. The account settings page sends people who are locked out to Yclas support (Yclas). Chat and tickets need you signed in, though (Yclas). The lockout page's route for someone who can't get into yclas.com and has lost the account's email is the yclas.com contact form, sent with your marketplace's address and any invoice or payment details that show the site is yours. Yclas says it answers support within 24 working hours.
If you're a site's only administrator, nobody on the site can clear your code. Yclas suggests keeping the text key safe or adding a second administrator account, and says hosted customers can also ask Yclas support (Yclas). More in Lost the phone with your authenticator app?
