MailChimp 2FA: How to Set Up an Authenticator App
Your Mailchimp login opens your audiences, campaigns and account settings. Mailchimp calls the feature 2-factor authentication: you need your login credentials plus a one-time passcode, sent by SMS or generated by an authenticator app such as Authenticator App - Novaz. Once it's set up, 2-factor authentication can't be removed or disabled, only reconfigured.
A MailChimp account holds campaigns and client data, so 2FA keeps it out of the wrong hands. Besides an authenticator app, MailChimp also offers SMS text codes. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.
2FA methods MailChimp supports
- SMS text message
- Authenticator app (TOTP)
Before you start
- Your Mailchimp username and password
- Authenticator App - Novaz installed on your iPhone or iPad: Mailchimp's app method requires a mobile device, and the passcode can't be generated on a computer
- A safe place, offline or on a separate device, for the backup code Mailchimp shows at the end
- If you're an Owner or Admin: once you turn it on for your login, every other user on the account must set up 2-factor authentication the next time they log in
- Your legal name, address and a current phone number on your Mailchimp account, which Mailchimp may use to verify your identity if you get locked out
Part 1: Turn on 2FA in MailChimp
- 1
Open your Account security page
Log in to Mailchimp and open your "Account security" page. Mailchimp's security settings are under your profile icon > "Account" > the "Settings" drop-down > "Security". New accounts are usually taken to this page automatically.
- 2
Choose Authenticator app
In the "2-factor authentication" section, select the "Authenticator app" radio button and click "Next".
Part 2: Add MailChimp to Authenticator App - Novaz
- 3
Add Mailchimp in Authenticator App - Novaz
Mailchimp now shows a "Set up authenticator app" section. Follow its steps with Authenticator App - Novaz: tap the + button, then scan the QR code or enter the setup key, whichever Mailchimp gives you. Use "Mailchimp" as the account name and tap "Save".
- 4
Note the 6-digit passcode
Authenticator App - Novaz now shows a 6-digit passcode for Mailchimp. Each passcode is valid for only 30 seconds, so have the current one ready.
Part 3: Confirm and finish
- 5
Enter the code and click Enable
Back on Mailchimp, enter the code in the "Authenticator code" field and click "Enable".
- 6
Save your backup code
The confirmation page shows a backup code. Save it offline or on a separate device: you'll need it to log in if you ever lose, restore or damage your phone. Then click "Close".
- 7
Log in with a passcode from now on
Each time you log in, enter your username and password and click "Log In", then type the passcode from Authenticator App - Novaz into the "Verification code" field and click "Log In".
If something goes wrong
- Mailchimp rejects the passcode: check that it comes from your Mailchimp entry, since your app may hold several accounts, and that it's less than 30 seconds old.
- Passcodes keep failing: Mailchimp's codes are time-based, so set your iPhone's date and time to automatic (Settings > General > Date & Time).
- You see "Authenticator Passcode Required" at login: an Owner or Admin has turned on 2-factor authentication, so you must set up your own first.
- You use SMS and are travelling abroad: Mailchimp suggests switching to an authenticator app before you travel.
Checked against MailChimp's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:
How to recover your MailChimp account
The backup code from the setup confirmation page is your way back in if your phone is lost or broken; it's different from the code you used to connect your app. Without it, an Admin on the account can invite you as a new user: the invitation email prompts you to create a new profile with a new username. Your old username can't access the account again unless you find the backup code later. If you can still log in and just need a new phone, click "Reconfigure" on your Account security page.
Frequently asked questions
- Can I turn off 2-factor authentication in Mailchimp?
- No. Once it's set up, you can't remove or disable it. On your Account security page, click "Reconfigure" to set up a new authenticator app, or "Switch to SMS" to change method.
- How do I get Mailchimp codes on another device?
- Mailchimp says to repeat the setup steps to connect your account to the authenticator app on that device.
- Do other users on my Mailchimp account need it too?
- Yes, if an Owner or Admin has enabled 2-factor authentication for their login. Every other user must then set it up the next time they log in.
- Will Mailchimp ask for a passcode every time?
- By default, yes, each time you return to your account. On your own trusted devices, ticking "Keep me logged in" and "Skip this for 30 days" at login reduces that. Clearing your cookies deletes these settings, and an unknown or different device always asks.
Generate your MailChimp codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Marketing guides
Novaz is not affiliated with, endorsed by, or sponsored by MailChimp. MailChimp and its logo are trademarks of their respective owner and are used here for identification only.



