Baidu AI cloud 2FA Setup with an Authenticator App
Your Baidu AI Cloud account controls your cloud resources, IAM users and funds, so a stolen password could be expensive. Baidu AI Cloud calls the feature two-factor authentication and offers SMS codes or "Virtual MFA", a code from an authenticator app. Baidu rates Virtual MFA as more secure, and Authenticator App - Novaz works for it.
A Baidu AI cloud account can hold your files and backups of everything else, so protect it with 2FA. Besides an authenticator app, Baidu AI cloud also offers SMS text codes. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.
2FA methods Baidu AI cloud supports
- Authenticator app (TOTP)
- SMS text message
Before you start
- Your Baidu AI Cloud root account login, or your IAM user login link if you're an IAM user
- The secure mobile phone bound to your account, since SMS is the other verification method and your fallback if you lose the app
- Authenticator App - Novaz installed on your iPhone or iPad
- The Baidu AI Cloud Console open on a computer, because you scan a QR code from the computer screen
Part 1: Turn on 2FA in Baidu AI cloud
- 1
Sign in to the console
Sign in to the Baidu AI Cloud Console with your root account, or through your IAM user login link.
- 2
Open User Center
Hover over your avatar in the upper-right corner and click it to open "User Center" (用户中心).
- 3
Click Bind next to Virtual MFA
In the "Security Information" (安全信息) section, click "Bind" (绑定) next to "Virtual MFA" (虚拟MFA). A QR code appears on your computer screen.
Part 2: Add Baidu AI cloud to Authenticator App - Novaz
- 4
Scan the QR code with Authenticator App - Novaz
Open Authenticator App - Novaz, tap the + button and scan the QR code on your computer. The account name and key are added automatically; check them and tap "Save".
- 5
Watch for two codes in a row
Authenticator App - Novaz now shows a 6-digit code for Baidu AI Cloud that refreshes every 30 seconds. Baidu asks for two consecutive codes, so note this one and wait for the next.
Part 3: Confirm and finish
- 6
Enter both codes and click OK
Back in the console, enter the two consecutive codes and click "OK" (确定). Your virtual MFA device is now bound.
- 7
Turn on Login Protection
Under "Login Protection" (登录保护), click "Settings" (设置), choose "Enable" (开启), select Virtual MFA (SMS can stay on too) and click "OK". Baidu has been switching this on automatically since May 2025, so it may already be enabled. "Operation Protection" (操作保护) works the same way for sensitive operations.
- 8
Save a way to recover your account
If Baidu AI cloud offers backup or recovery codes, download them or write them down and store them somewhere safe. They are how you get back into your account if you ever lose your phone. If it doesn't, check how Baidu AI cloud recovers accounts before you need it.
If something goes wrong
- The console rejects your codes: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), and enter two different codes that followed each other, not the same one twice.
- Virtual MFA isn't available when you sign in: if both methods are enabled, switch to SMS verification; either one is enough.
- A login protection pop-up appears even though you never turned it on: Baidu says this comes from Baidu account risk-control rules, not from your console setting.
- Several people share the account: once you bind Virtual MFA, anyone without it can't sign in, so they need to scan the same QR code during setup.
Checked against Baidu AI cloud's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:
How to recover your Baidu AI cloud account
Baidu AI Cloud's docs don't mention backup codes. If both SMS and Virtual MFA are enabled, you can still sign in with an SMS code after losing the phone with Authenticator App - Novaz. Normal unbinding under "Security Information" needs a 6-digit code from the bound device; without one, submit an unbind request through the account self-service tool (账号自助工具-解绑MFA). Individuals upload both sides of their ID card, a hand-signed Baidu AI Cloud virtual MFA unbinding letter and payment proof such as an invoice; companies send the legal representative's ID, the business licence and the letter with the company seal. Baidu reviews requests within 5 working days. IAM users who deleted the app should submit a ticket.
Frequently asked questions
- Did Baidu AI Cloud turn on MFA for me automatically?
- Probably. From 26 May 2025, Baidu switched on login protection in batches for accounts without it, using SMS plus Virtual MFA, and gave notice by SMS, email and in-site message. If you hadn't bound a device, you can bind it while signing in.
- What's the difference between Login Protection and Operation Protection?
- Login Protection asks for an SMS or Virtual MFA code when you sign in to the console. Operation Protection asks again before sensitive operations; root accounts have it on with SMS by default.
- Can an administrator set this up for IAM users?
- Yes. The root account or an administrator opens Identity and Access Management > User Management > IAM User, clicks the user's name and enables protection in the "Two Factor Authentication" module. A user with no device bound is sent to the binding page at next sign-in. IAM users who sign in through SSO aren't asked for an MFA code.
- Which authenticator apps does Baidu AI Cloud support?
- Baidu recommends the Baidu AI Cloud app or Google Authenticator, and says other common authenticator apps work. Authenticator App - Novaz scans the same QR code.
Generate your Baidu AI cloud codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Cloud guides
Novaz is not affiliated with, endorsed by, or sponsored by Baidu AI cloud. Baidu AI cloud and its logo are trademarks of their respective owner and are used here for identification only.