Authenticator App - Novaz

Heroku 2FA: How to Set Up an Authenticator App

heroku.com Supported

Protect your Heroku account with two-factor authentication (2FA). Once enabled, signing in also requires a one-time code from your authenticator app — not just your password.

A Heroku account can hold your files and backups of everything else, so protect it with 2FA. Besides an authenticator app, Heroku also offers a proprietary app, a hardware token and security keys. An authenticator app (TOTP) is usually the best balance of security and convenience. For the strongest protection, Heroku also supports hardware security keys.

2FA methods Heroku supports

  • Authenticator app (TOTP)
  • Proprietary app
  • Hardware token
  • Security key (U2F / WebAuthn)
  1. 1

    Download Authenticator App - Novaz

    Install Authenticator App - Novaz from the App Store on your iPhone or iPad and open it — you'll use it to scan Heroku's QR code and generate your 6-digit sign-in codes.

    Download on the App Store
  2. 2

    Sign in to Heroku and open your Heroku account security settings.

  3. 3

    Turn on two-factor authentication and choose the authenticator-app option.

    Look for "Authenticator app", "Authentication app", or "TOTP" rather than SMS.

  4. 4

    Scan the QR code with Authenticator App - Novaz.

    Open Authenticator App - Novaz, tap add, and point your camera at the QR code Heroku displays. Can't scan? Enter the setup key manually instead.

  5. 5

    Enter the 6-digit code to confirm.

    Type the code Authenticator App - Novaz generates to verify and link your Heroku account.

  6. 6

    Save a way to recover your account.

    If Heroku shows backup or recovery codes, store them somewhere safe, away from your phone. If it doesn't, check how Heroku recovers accounts (support, an admin, or another sign-in method) before you need it.

Menu names on Heroku can change — the official Heroku 2FA documentation ↗ always has the exact, current path.

How to recover your Heroku account

If you lose access to your authenticator and Heroku gave you backup or recovery codes when you turned on 2FA, sign in with one of them; keep them somewhere safe, away from your phone. Not every service issues codes. If Heroku doesn't, or you didn't save them, use Heroku's account-recovery or support process (or ask your admin, for a work account) to get back in.

Frequently asked questions

Does Heroku work with authenticator apps like Authenticator App - Novaz?
Yes. Heroku supports TOTP authenticator apps, so you can generate its two-factor codes in Authenticator App - Novaz.
Is Heroku two-factor authentication free?
Yes. Enabling authenticator-app 2FA on Heroku is free — you only need the free Authenticator App - Novaz.
What if I lose access to my Heroku 2FA codes?
If Heroku gave you backup or recovery codes during setup, sign in with one of them. If it didn't, or you didn't save them, use Heroku's account recovery or contact its support (or your admin, for a work account), then add the account to Authenticator App - Novaz again.
Should I use an authenticator app or a security key on Heroku?
Heroku supports both. An authenticator app like Authenticator App - Novaz is free and works on any phone; a hardware security key adds phishing resistance. You can enable both.

Generate your Heroku codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Cloud guides

Novaz is not affiliated with, endorsed by, or sponsored by Heroku. Heroku and its logo are trademarks of their respective owner and are used here for identification only.