Authenticator App - Novaz

itch.io 2FA: How to Set Up an Authenticator App

itch.io SupportedChecked against official help · September 25, 2026

Your itch.io account holds your game library and purchases and, if you're a creator, your projects and earnings. itch.io calls the feature two-factor authentication and supports it through TOTP (time-based one-time passwords) only, so an authenticator app such as Authenticator App - Novaz provides your codes.

A itch.io account holds purchases, in-game items, and payment details that thieves can resell. itch.io secures sign-ins with an authenticator app — set it up once and you're protected on every login.

2FA methods itch.io supports

  • Authenticator app (TOTP)

Before you start

  • Your itch.io username or email and password
  • Authenticator App - Novaz installed on your iPhone or iPad
  • itch.io open on a computer, so the QR code is on a different screen from your phone
  • A printer or another safe place for your 8-digit recovery codes
Download on the App Store

Part 1: Turn on 2FA in itch.io

  1. 1

    Open the Security tab in your settings

    Log in to itch.io and open the "Security" tab of your user settings. The "Set up two-factor authentication" button on itch.io's 2FA help page links straight to it (itch.io/user/settings/two-factor-auth).

  2. 2

    Start the setup

    Follow the instructions on the Security tab. The first step shows a QR code that contains the shared secret, your account name and the issuer, itch.io. Keep the page open.

Part 2: Add itch.io to Authenticator App - Novaz

  1. 3

    Scan the QR code in Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. The account name and itch.io as the issuer come from the code, so check the entry, then tap "Save".

  2. 4

    Note the 6-digit code

    Authenticator App - Novaz now shows a 6-digit verification code for itch.io. It changes every 30 seconds.

Part 3: Confirm and finish

  1. 5

    Finish the steps on itch.io

    Back on itch.io, follow the rest of the instructions on the Security tab. Where itch.io asks for a verification code, type the current 6-digit code from Authenticator App - Novaz.

  2. 6

    Print your recovery codes

    Turning on two-factor authentication generates a set of 8-digit recovery codes. Print them and keep them with you whenever you might need to log in to itch.io: they let you in without your phone.

  3. 7

    Log in with password and code

    From now on, logging in to itch.io asks for a 6-digit code from Authenticator App - Novaz in addition to your password.

If something goes wrong

  • itch.io refuses your verification codes: codes depend on time, so any offset between your phone's clock and the server causes failures. Make sure your iPhone sets its date and time automatically (Settings > General > Date & Time).
  • The code changed while you were typing: wait for the next one in Authenticator App - Novaz and enter that instead.
  • You were hoping for text-message codes: itch.io doesn't offer SMS two-factor authentication and says it won't add it. TOTP codes also work without mobile network coverage.

Checked against itch.io's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your itch.io account

When you turn on two-factor authentication, itch.io generates a set of 8-digit recovery codes that let you log in without your phone at all. Keep them printed and in a safe place: itch.io warns that this is what stops you getting locked out of your account. If you need help with an account, itch.io asks you to email support@itch.io from an email address that owns the account, otherwise it can't process the request; you'll get a receipt with a Ticket ID to quote in replies. itch.io's docs don't say what support can do about lost 2FA codes, so don't rely on it instead of your recovery codes.

Frequently asked questions

Does itch.io support SMS codes?
No. itch.io points out that NIST has deprecated SMS two-factor authentication and says it won't add it. Use an authenticator app instead.
Which authenticator app works with itch.io?
itch.io uses standard TOTP and recommends Google Authenticator. Authenticator App - Novaz generates the same 6-digit TOTP codes.
Do I need mobile signal to get a code?
No. TOTP codes are generated on your phone from a shared key and the current time, so they work even without mobile network coverage.
What if I lose my phone?
Log in with one of the 8-digit recovery codes itch.io generated when you turned on two-factor authentication. They work without your phone, so keep them printed and stored safely.

Generate your itch.io codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Gaming guides

Novaz is not affiliated with, endorsed by, or sponsored by itch.io. itch.io and its logo are trademarks of their respective owner and are used here for identification only.