Authenticator App - Novaz

HackerOne 2FA: How to Set Up an Authenticator App

hackerone.com Supported

HackerOne supports app-based two-factor authentication (2FA). Turning it on adds a second layer of protection, so a stolen password alone can't unlock your HackerOne account.

A HackerOne account is part of your security setup, so it deserves strong 2FA of its own. HackerOne secures sign-ins with an authenticator app — set it up once and you're protected on every login.

2FA methods HackerOne supports

  • Authenticator app (TOTP)
  1. 1

    Download Authenticator App - Novaz

    Install Authenticator App - Novaz from the App Store on your iPhone or iPad and open it — you'll use it to scan HackerOne's QR code and generate your 6-digit sign-in codes.

    Download on the App Store
  2. 2

    Sign in to HackerOne and open your HackerOne account security settings.

  3. 3

    Turn on two-factor authentication and choose the authenticator-app option.

    Look for "Authenticator app", "Authentication app", or "TOTP" rather than SMS.

  4. 4

    Scan the QR code with Authenticator App - Novaz.

    Open Authenticator App - Novaz, tap add, and point your camera at the QR code HackerOne displays. Can't scan? Enter the setup key manually instead.

  5. 5

    Enter the 6-digit code to confirm.

    Type the code Authenticator App - Novaz generates to verify and link your HackerOne account.

  6. 6

    Save a way to recover your account.

    If HackerOne shows backup or recovery codes, store them somewhere safe, away from your phone. If it doesn't, check how HackerOne recovers accounts (support, an admin, or another sign-in method) before you need it.

Menu names on HackerOne can change — the official HackerOne 2FA documentation ↗ always has the exact, current path.

How to recover your HackerOne account

If you lose access to your authenticator and HackerOne gave you backup or recovery codes when you turned on 2FA, sign in with one of them; keep them somewhere safe, away from your phone. Not every service issues codes. If HackerOne doesn't, or you didn't save them, use HackerOne's account-recovery or support process (or ask your admin, for a work account) to get back in.

Frequently asked questions

Does HackerOne work with authenticator apps like Authenticator App - Novaz?
Yes. HackerOne supports TOTP authenticator apps, so you can generate its two-factor codes in Authenticator App - Novaz.
Is HackerOne two-factor authentication free?
Yes. Enabling authenticator-app 2FA on HackerOne is free — you only need the free Authenticator App - Novaz.
What if I lose access to my HackerOne 2FA codes?
If HackerOne gave you backup or recovery codes during setup, sign in with one of them. If it didn't, or you didn't save them, use HackerOne's account recovery or contact its support (or your admin, for a work account), then add the account to Authenticator App - Novaz again.

Generate your HackerOne codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Security guides

Novaz is not affiliated with, endorsed by, or sponsored by HackerOne. HackerOne and its logo are trademarks of their respective owner and are used here for identification only.