Authenticator App - Novaz

Malwarebytes OneView 2FA Setup Guide

oneview.malwarebytes.com SupportedChecked against official help · September 25, 2026

Your OneView login opens the console where you set up sites and deploy and scan their endpoints. Since May 20, 2026, two-factor authentication (2FA) has been mandatory for all OneView users: if you haven't set it up, OneView prompts you before you can sign in. It uses an authenticator app on a mobile device, so Authenticator App - Novaz can provide your codes.

A Malwarebytes OneView account is part of your security setup, so it deserves strong 2FA of its own. Malwarebytes OneView secures sign-ins with an authenticator app — set it up once and you're protected on every login.

2FA methods Malwarebytes OneView supports

  • Authenticator app (TOTP)

Before you start

  • Your OneView login credentials
  • An iPhone or iPad with a camera and Authenticator App - Novaz installed, because OneView needs a mobile device with a camera and an authenticator app
  • The OneView login page (oneview.threatdown.com/auth/login) open on a computer, so the QR code is on a different screen from your phone
  • If your organization signs in through SAML 2.0 single sign-on (for example Okta or Azure AD), SSO already satisfies the 2FA requirement
  • For Global Administrators: a second Global Administrator account, which ThreatDown recommends so one can reset 2FA for the other
Download on the App Store

Part 1: Turn on 2FA in Malwarebytes OneView

  1. 1

    Sign in to OneView

    Go to the OneView login page and enter your credentials.

  2. 2

    Open the 2FA setup screen

    OneView shows "Two-factor authentication must be configured for your user account." with a QR code to the right. You must finish this before you can use the console. ThreatDown also lets you set up 2FA from your profile settings.

Part 2: Add Malwarebytes OneView to Authenticator App - Novaz

  1. 3

    Scan the QR code in Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code OneView shows. Check the account name, then tap "Save".

  2. 4

    Note the code

    Authenticator App - Novaz now shows a code for OneView. It changes every 30 seconds, so enter it before it expires.

Part 3: Confirm and finish

  1. 5

    Enter the code

    Back in OneView, type the code into the "Enter code..." box under "Enter the code from your authenticator app." to finish setup.

  2. 6

    Add a recovery email if asked

    If a Global Administrator has turned on recovery codes by email, OneView asks you for a recovery email address when you log in. It must be on a different domain from your OneView login email. You can set or change it later from the user profile menu.

If something goes wrong

  • "Code is incorrect or expired": codes change every 30 seconds. Make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), then enter the most recent code.
  • "Session timed out": the time on the computer you log in with must match the time on your phone. Sync the computer's time settings, then log in to OneView again.
  • You're switching phones or apps and are still logged in: click your display name > "Profile", go to the "Security Settings" tab and click "Reset 2FA", then set up Authenticator App - Novaz again.
  • You still can't log in: ask another Global Administrator to reset your 2FA, or contact ThreatDown Support.

Checked against Malwarebytes OneView's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your Malwarebytes OneView account

ThreatDown's OneView help doesn't describe backup codes. Email recovery codes only work if a Global Administrator turned on "Allow the recovery code to be sent via email" (under "Configure" > "Users" > "Two-factor authentication") before you need one, and you've set a recovery email. In that case, on the OneView login page, enter your credentials, click "Request recovery code", check your email, enter the recovery code on the verification screen and click "Submit". ThreatDown notes that this setting could let someone who gets into your email bypass 2FA. Otherwise, another Global Administrator can click "Configure" > "Users", find you, click the ellipsis icon and choose "Reset 2FA". If there are no other admins, contact Support.

Frequently asked questions

Can I skip 2FA in OneView?
No. The prompt could be skipped only during the May 7–19, 2026 transition. Since May 20, 2026, any user who hasn't enrolled must do so before accessing the console. Only SAML 2.0 single sign-on is an alternative.
Which authenticator apps does OneView support?
ThreatDown lists Google Authenticator, Authy, 1Password, Microsoft Authenticator, Okta Verify, Duo Mobile and LastPass Authenticator. Authenticator App - Novaz isn't named, but you add OneView to it the same way, by scanning the QR code on the setup screen.
How do I reset 2FA for another user?
As a Global Administrator, click "Configure" > "Users", find the user, click the ellipsis icon and click "Reset 2FA".
Does OneView give me backup codes?
Its help doesn't describe any. The only recovery code it describes is one sent by email, and only if a Global Administrator enabled that setting and you've added a recovery email on a different domain from your OneView login.

Generate your Malwarebytes OneView codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Security guides

Novaz is not affiliated with, endorsed by, or sponsored by Malwarebytes OneView. Malwarebytes OneView and its logo are trademarks of their respective owner and are used here for identification only.