Authenticator App - Novaz

Госуслуги (Gosuslugi) 2FA Setup Guide

gosuslugi.ru SupportedChecked against official help · September 25, 2026

Your Gosuslugi account holds your personal data and signs you in to every site that accepts your Gosuslugi login. Gosuslugi calls the feature sign-in with confirmation (вход с подтверждением) and makes it mandatory; one of the methods is a one-time code (TOTP) from an authenticator app, so Authenticator App - Novaz can supply your codes instead of SMS.

A Госуслуги (Gosuslugi) account can expose official records and identity data, so strong 2FA is important. Besides an authenticator app, Госуслуги (Gosuslugi) also offers SMS text codes and a hardware token. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.

2FA methods Госуслуги (Gosuslugi) supports

  • SMS text message
  • Authenticator app (TOTP)
  • Hardware token

Before you start

  • Your Gosuslugi login and password, plus your current confirmation method, because signing in already asks for it
  • An up-to-date phone number under "Profile" ("Профиль") > "Account" ("Учётная запись"): if you ever restore access, confirmation switches to SMS on that number
  • Authenticator App - Novaz installed on your iPhone or iPad
  • Your Gosuslugi personal account (lk.gosuslugi.ru) open in a browser on a computer, so the QR code is on a different screen from your phone
  • Ideally the Gosuslugi app installed and signed in, as another way in if you lose the phone with Novaz

Part 1: Turn on 2FA in Госуслуги (Gosuslugi)

  1. 1

    Sign in to Gosuslugi

    Sign in at esia.gosuslugi.ru with your login and password, and confirm with the method you use now.

  2. 2

    Open Security > Sign-in

    In your personal account, open "Profile" ("Профиль") > "Security" ("Безопасность") > "Sign-in" ("Вход в систему").

  3. 3

    Choose One-time code (TOTP)

    Select "Sign-in with confirmation" ("Вход с подтверждением") > "One-time code (TOTP)" ("Одноразовый код (TOTP)") > "Continue" ("Продолжить"). Gosuslugi shows a QR code and a key; keep the page open.

Part 2: Add Госуслуги (Gosuslugi) to Authenticator App - Novaz

  1. 4

    Add Gosuslugi in Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. If it won't scan, choose to enter a setup key and type the key exactly as shown. An entry called "Gosuslugi" appears; tap "Save".

  2. 5

    Note the one-time code

    Authenticator App - Novaz now shows a one-time code for Gosuslugi that refreshes regularly. Have the current code ready.

Part 3: Confirm and finish

  1. 6

    Enter the code on Gosuslugi

    Back on Gosuslugi, enter the one-time code from Authenticator App - Novaz. Sign-in with confirmation now uses your authenticator app.

  2. 7

    Know what signing in looks like

    From now on you enter your login and password, then the current code from Authenticator App - Novaz. Without the app you can't sign in with a one-time code, so keep another way in ready.

  3. 8

    Save a way to recover your account

    If Госуслуги (Gosuslugi) offers backup or recovery codes, download them or write them down and store them somewhere safe. They are how you get back into your account if you ever lose your phone. If it doesn't, check how Госуслуги (Gosuslugi) recovers accounts before you need it.

If something goes wrong

  • Gosuslugi shows "Invalid code" ("Неверный код"): compare the time on your computer and your phone, since even 1 second's difference can produce a wrong code. Let your iPhone set its date and time automatically (Settings > General > Date & Time).
  • The times match but the code still fails: sign in another way, such as a QR code through the Gosuslugi app or an electronic signature certificate you connected earlier, or restore access.
  • You changed or lost your phone: one-time code sign-in won't work. Sign in another way and change the method, or restore access.
  • You want to change the method on your phone: in the Gosuslugi app, open your profile, then "Security" ("Безопасность") > "Sign-in" ("Вход в систему") > "Sign-in with confirmation" ("Вход с подтверждением").

How to recover your Госуслуги (Gosuslugi) account

Gosuslugi's help doesn't describe backup codes for one-time code sign-in. If you lose the phone with Authenticator App - Novaz, sign in another way: in the Gosuslugi app if you've used it before, or in a browser with "Sign in another way" ("Войти другим способом") > "QR code" ("QR‑код"), scanning it with "Goskan" ("Госкан") in the Gosuslugi app (version 11.0 or later) and tapping "Sign in" ("Войти"). A connected electronic signature certificate also works. Once in, choose a new method. Otherwise, restore access online through SberBank if you're its customer, or at a service centre with your passport and SNILS. Confirmation then switches to SMS, and you can set up Novaz again.

Frequently asked questions

Can I turn off sign-in with confirmation?
No. It's mandatory on Gosuslugi, because it protects your data on every site that accepts your Gosuslugi login. You can change the method at any time.
Which confirmation methods does Gosuslugi offer?
A code by SMS, a code in the MAX messenger, a one-time code (TOTP) from an authenticator app, and biometrics. All except MAX can be set up in your personal account in a browser; MAX is offered only while you sign in.
Which authenticator apps work with Gosuslugi?
Any app that works with one-time codes (TOTP). Gosuslugi links to a search for TOTP apps for iOS rather than naming one, and Authenticator App - Novaz is such an app.
What happens to my TOTP setting if I restore my account?
Sign-in confirmation switches automatically to SMS codes sent to the number in your personal account. Set up the one-time code again afterwards.

Generate your Госуслуги (Gosuslugi) codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Government guides

Novaz is not affiliated with, endorsed by, or sponsored by Госуслуги (Gosuslugi). Госуслуги (Gosuslugi) and its logo are trademarks of their respective owner and are used here for identification only.