Authenticator App - Novaz

Dreamhost 2FA: How to Set Up an Authenticator App

dreamhost.com SupportedChecked against official help · September 25, 2026

Multifactor Authentication (MFA) adds a second layer of security to your DreamHost account, helping protect it from hackers and website hijackers. It works with one-time passcodes from any MFA app that can scan a QR code, such as Authenticator App - Novaz, and it protects your DreamHost panel login: DreamHost email doesn't support MFA.

Whoever controls your Dreamhost account controls your domains, so 2FA keeps them from being stolen. Besides an authenticator app, Dreamhost also offers a hardware token. An authenticator app (TOTP) is usually the best balance of security and convenience.

2FA methods Dreamhost supports

  • Authenticator app (TOTP)
  • Hardware token

Before you start

  • Your DreamHost panel login and your current account password (the setup form asks for it)
  • Authenticator App - Novaz installed on your iPhone or iPad
  • The DreamHost panel open on a computer, so the QR code is on a different screen from your phone
  • Somewhere safe to write down your backup codes
Download on the App Store

Part 1: Turn on 2FA in Dreamhost

  1. 1

    Open the Security page

    Log in to the DreamHost panel and go to the "Security" page (panel.dreamhost.com/index.cgi?tree=billing.secure). Find the section titled "Multifactor Authentication".

  2. 2

    Enter your password and pick the time-based type

    In "Current Password", enter your DreamHost account password. In the "Multifactor Authentication Type" dropdown, choose "Google Authenticator, Time-Based (recommended)". DreamHost recommends time-based codes because they stay in sync with its servers automatically.

  3. 3

    Click Get Started

    Click the "Get Started" button. DreamHost shows a QR code with a 16-digit secret key below it. Keep this page open.

Part 2: Add Dreamhost to Authenticator App - Novaz

  1. 4

    Add DreamHost in Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. If the camera can't read it, choose to enter a setup key and type the 16-digit secret key exactly as DreamHost shows it, using "DreamHost" as the account name, then tap "Save". To use more than one device, scan the same QR code on each of them now.

  2. 5

    Note the 6-digit passcode

    Authenticator App - Novaz now shows a 6-digit passcode for DreamHost. Each passcode is valid only for a short time, so have it ready for the next step.

Part 3: Confirm and finish

  1. 6

    Enter the passcode and click Activate!

    Back in the panel, type the 6-digit passcode in the passcode field and click the "Activate!" button to sync DreamHost's server to your device.

  2. 7

    Write down your backup codes

    A "Success!" dialog shows your backup codes. DreamHost highly recommends saving them, so write them down before you leave the page.

  3. 8

    Know what login looks like now

    The panel login now shows a "Multifactor Authentication Code" field for the 6-digit passcode, plus a "Remember this computer for" dropdown where you choose how long this computer should be remembered.

If something goes wrong

  • Your first login from a new computer fails: MFA uses browser cookies, so on a computer that has never logged in to your panel the code field is hidden at first. After that first attempt, DreamHost shows the "Multifactor Authentication Code" field and you can log in.
  • The passcode isn't accepted: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), then enter the newest code.
  • You picked "Google Authenticator, Counter-Based": counter-based codes need manual syncing and must be advanced to the next code each time you use one, which is why DreamHost recommends the time-based type.
  • You're buying a new phone: disable MFA in the panel first, then set it up again on the new phone with the steps above.

Checked against Dreamhost's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your Dreamhost account

DreamHost gives you backup codes in the "Success!" dialog at the end of setup. If you lose the device with Authenticator App - Novaz, you must use one of those backup codes or contact DreamHost support to regain access. If you think your account is compromised, for example after losing your phone, use the "Regenerate Key" button to invalidate the old key and create a new one. If you forget your password but still have your phone or a valid backup code, click the "forgot password?" link on the login page; DreamHost emails a reset link that works as long as you still have your second factor.

Frequently asked questions

Does MFA protect my DreamHost email?
No. DreamHost email service does not support Multifactor Authentication. MFA protects your DreamHost panel login.
Doesn't "Remember this computer" defeat the purpose?
DreamHost says no: remembering a computer doesn't turn MFA off, it lets that computer count as your second factor. A phisher who steals your password still needs a passcode on their own computer.
What other MFA options does DreamHost offer?
Besides passcodes from an authenticator app, DreamHost supports a YubiKey, a hardware token that plugs into a USB slot. DreamHost says that without a smartphone or other mobile device you must buy a YubiKey.
How do I turn MFA off?
Go to the "Security" page in the panel and click the "Disable" button in the Multifactor Authentication section. DreamHost highly recommends keeping MFA on.

Generate your Dreamhost codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Domains guides

Novaz is not affiliated with, endorsed by, or sponsored by Dreamhost. Dreamhost and its logo are trademarks of their respective owner and are used here for identification only.