Bitrix24 2FA: How to Set Up an Authenticator App
Your Bitrix24 account opens your company's chats, tasks, CRM and files. Bitrix24 calls the feature two-step authentication: after your login and password you enter a one-time code from the Bitrix24 OTP app or any TOTP app, such as Authenticator App - Novaz. Bitrix24's newer two-factor authentication confirms sign-ins in its own mobile app or by SMS instead, and Novaz doesn't work with it.
A Bitrix24 account carries private conversations, so keeping it secure with 2FA matters. Besides an authenticator app, Bitrix24 also offers SMS text codes and a proprietary app. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.
2FA methods Bitrix24 supports
- SMS text message
- Authenticator app (TOTP)
- Proprietary app
Before you start
- Your Bitrix24 login and password
- Authenticator App - Novaz installed on your iPhone or iPad
- Bitrix24 open on a computer, so the QR code is on a different screen from your phone
- The same time on your phone and your computer, which Bitrix24 asks you to check first
- If your administrator made two-step authentication mandatory, setup finished within the time they allowed, or you can't sign in
Part 1: Turn on 2FA in Bitrix24
- 1
Open your profile's Security section
Sign in to Bitrix24 and open your personal profile. Click the "Security" button, then click "Enable".
- 2
Check which method Bitrix24 offers
Bitrix24 shows a QR code for an authentication app. If it instead asks you to install the Bitrix24 mobile app and scan the code with your phone's camera, your Bitrix24 uses the new two-factor authentication, and Authenticator App - Novaz can't be used.
Part 2: Add Bitrix24 to Authenticator App - Novaz
- 3
Add Bitrix24 in Authenticator App - Novaz
Open Authenticator App - Novaz, tap the + button and scan the QR code. If it won't scan, choose to enter a setup key and enter the data Bitrix24 shows manually, using "Bitrix24" as the account name, then tap "Save".
- 4
Note the one-time code
Authenticator App - Novaz now shows a one-time code for Bitrix24. Each code is valid for a short time and works only once, so have the current one ready.
Part 3: Confirm and finish
- 5
Enter the code and click Done
Back in Bitrix24, enter the verification code from Authenticator App - Novaz and click "Done". Two-step authentication is now on.
- 6
Save your recovery codes
Open your profile again and click "Security" > "Recovery Codes". Save or print the codes; each one works once.
- 7
Know what signing in looks like
From now on you enter your login, your password and a one-time code from Authenticator App - Novaz each time you sign in to Bitrix24.
If something goes wrong
- Bitrix24 rejects the code: make sure your phone and computer show the same time. Let your iPhone set its date and time automatically (Settings > General > Date & Time), then enter the newest code.
- You're changing phones: while you still have the old one, open your profile's "Security" tab, click "My mobile device has changed" and set up Authenticator App - Novaz on the new phone.
- You lost your phone: sign in with a recovery code instead of the one-time code, or ask a Bitrix24 administrator to temporarily disable two-step authentication for you.
- You can't sign in because the setup deadline passed: users who don't turn it on within the administrator's time limit can't sign in, so contact your Bitrix24 administrator.
Checked against Bitrix24's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:
How to recover your Bitrix24 account
Bitrix24's recovery codes cover the case where you can't use your authentication app: after your login and password, enter a recovery code instead of the one-time code, then set up two-step authentication on your new device. Without codes, a Bitrix24 administrator can open your profile, go to the "Security" section, click "Disable" and choose how long to switch it off, so you can sign in and set up Authenticator App - Novaz again. Another administrator can do the same for an administrator who lost their phone; if there's only one administrator, Bitrix24 says to contact its Support team via social networks.
Frequently asked questions
- Can an administrator make two-step authentication mandatory?
- Yes, after turning it on for their own account. In the account "Settings", on the "Security" tab under "Two-factor authentication", enable "Mandatory for all employees", set how long users have to turn it on and save.
- Do I have to use the Bitrix24 OTP app?
- No. Bitrix24 accepts its own Bitrix24 OTP app or any app that supports time-based one-time passwords (TOTP), including Authenticator App - Novaz.
- What is the new two-factor authentication?
- Bitrix24's newer method, required on the Professional and Enterprise plans, confirms sign-ins in the Bitrix24 mobile app or with an SMS code instead of codes from third-party authenticator apps. Bitrix24 recommends switching to it, so check with your administrator before setting up Novaz.
- Will Bitrix24 ask for a code every time I sign in?
- Yes. With two-step authentication on, you enter your login, your password and a one-time code from Authenticator App - Novaz each time you sign in.
Generate your Bitrix24 codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Communication guides
Novaz is not affiliated with, endorsed by, or sponsored by Bitrix24. Bitrix24 and its logo are trademarks of their respective owner and are used here for identification only.



