HMRC (Government Gateway) 2FA Setup Guide
Enable two-factor authentication on HMRC (Government Gateway) to stop unauthorized logins. After setup, HMRC (Government Gateway) asks for a rotating code from Authenticator App - Novaz in addition to your password.
A HMRC (Government Gateway) account can expose official records and identity data, so strong 2FA is important. Besides an authenticator app, HMRC (Government Gateway) also offers SMS text codes, phone-call codes and a proprietary app. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.
2FA methods HMRC (Government Gateway) supports
- SMS text message
- Phone call
- Authenticator app (TOTP)
- Proprietary app
- 1
Download Authenticator App - Novaz
Install Authenticator App - Novaz from the App Store on your iPhone or iPad and open it — you'll use it to scan HMRC (Government Gateway)'s QR code and generate your 6-digit sign-in codes.
- 2
Sign in to HMRC (Government Gateway) and open your HMRC (Government Gateway) account security settings.
- 3
Turn on two-factor authentication and choose the authenticator-app option.
Look for "Authenticator app", "Authentication app", or "TOTP" rather than SMS.
- 4
Scan the QR code with Authenticator App - Novaz.
Open Authenticator App - Novaz, tap add, and point your camera at the QR code HMRC (Government Gateway) displays. Can't scan? Enter the setup key manually instead.
- 5
Enter the 6-digit code to confirm.
Type the code Authenticator App - Novaz generates to verify and link your HMRC (Government Gateway) account.
- 6
Save a way to recover your account.
If HMRC (Government Gateway) shows backup or recovery codes, store them somewhere safe, away from your phone. If it doesn't, check how HMRC (Government Gateway) recovers accounts (support, an admin, or another sign-in method) before you need it.
Menu names on HMRC (Government Gateway) can change — the official HMRC (Government Gateway) 2FA documentation ↗ always has the exact, current path.
How to recover your HMRC (Government Gateway) account
If you lose access to your authenticator and HMRC (Government Gateway) gave you backup or recovery codes when you turned on 2FA, sign in with one of them; keep them somewhere safe, away from your phone. Not every service issues codes. If HMRC (Government Gateway) doesn't, or you didn't save them, use HMRC (Government Gateway)'s account-recovery or support process (or ask your admin, for a work account) to get back in.
Frequently asked questions
- Does HMRC (Government Gateway) work with authenticator apps like Authenticator App - Novaz?
- Yes. HMRC (Government Gateway) supports TOTP authenticator apps, so you can generate its two-factor codes in Authenticator App - Novaz.
- Is HMRC (Government Gateway) two-factor authentication free?
- Yes. Enabling authenticator-app 2FA on HMRC (Government Gateway) is free — you only need the free Authenticator App - Novaz.
- What if I lose access to my HMRC (Government Gateway) 2FA codes?
- If HMRC (Government Gateway) gave you backup or recovery codes during setup, sign in with one of them. If it didn't, or you didn't save them, use HMRC (Government Gateway)'s account recovery or contact its support (or your admin, for a work account), then add the account to Authenticator App - Novaz again.
Generate your HMRC (Government Gateway) codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Government guides
Novaz is not affiliated with, endorsed by, or sponsored by HMRC (Government Gateway). HMRC (Government Gateway) and its logo are trademarks of their respective owner and are used here for identification only.


