Okta 2FA: How to Set Up an Authenticator App
Protect your Okta account with two-factor authentication (2FA). Once enabled, signing in also requires a one-time code from your authenticator app — not just your password.
A Okta account is part of your security setup, so it deserves strong 2FA of its own. Besides an authenticator app, Okta also offers SMS text codes, phone-call codes, email codes, a hardware token, security keys and a proprietary app. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks. For the strongest protection, Okta also supports hardware security keys.
2FA methods Okta supports
- SMS text message
- Phone call
- Email code
- Authenticator app (TOTP)
- Hardware token
- Security key (U2F / WebAuthn)
- Proprietary app
- 1
Download Authenticator App - Novaz
Install Authenticator App - Novaz from the App Store on your iPhone or iPad and open it — you'll use it to scan Okta's QR code and generate your 6-digit sign-in codes.
- 2
Sign in to Okta and open your Okta account security settings.
- 3
Turn on two-factor authentication and choose the authenticator-app option.
Look for "Authenticator app", "Authentication app", or "TOTP" rather than SMS.
- 4
Scan the QR code with Authenticator App - Novaz.
Open Authenticator App - Novaz, tap add, and point your camera at the QR code Okta displays. Can't scan? Enter the setup key manually instead.
- 5
Enter the 6-digit code to confirm.
Type the code Authenticator App - Novaz generates to verify and link your Okta account.
- 6
Save a way to recover your account.
If Okta shows backup or recovery codes, store them somewhere safe, away from your phone. If it doesn't, check how Okta recovers accounts (support, an admin, or another sign-in method) before you need it.
Menu names on Okta can change — the official Okta 2FA documentation ↗ always has the exact, current path.
How to recover your Okta account
If you lose access to your authenticator and Okta gave you backup or recovery codes when you turned on 2FA, sign in with one of them; keep them somewhere safe, away from your phone. Not every service issues codes. If Okta doesn't, or you didn't save them, use Okta's account-recovery or support process (or ask your admin, for a work account) to get back in.
Frequently asked questions
- Does Okta work with authenticator apps like Authenticator App - Novaz?
- Yes. Okta supports TOTP authenticator apps, so you can generate its two-factor codes in Authenticator App - Novaz.
- Is Okta two-factor authentication free?
- Yes. Enabling authenticator-app 2FA on Okta is free — you only need the free Authenticator App - Novaz.
- What if I lose access to my Okta 2FA codes?
- If Okta gave you backup or recovery codes during setup, sign in with one of them. If it didn't, or you didn't save them, use Okta's account recovery or contact its support (or your admin, for a work account), then add the account to Authenticator App - Novaz again.
- Should I use an authenticator app or a security key on Okta?
- Okta supports both. An authenticator app like Authenticator App - Novaz is free and works on any phone; a hardware security key adds phishing resistance. You can enable both.
Generate your Okta codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Security guides
Novaz is not affiliated with, endorsed by, or sponsored by Okta. Okta and its logo are trademarks of their respective owner and are used here for identification only.