Authenticator App - Novaz

ORCID 2FA: How to Set Up an Authenticator App

orcid.org SupportedChecked against official help · September 25, 2026

Your ORCID account is where you manage your ORCID record, its visibility settings and even its deactivation, so it deserves more than a password. ORCID calls the feature two-factor authentication (2FA): it's optional, and it works with any 2FA app that can scan a QR code or take a key to generate one-time codes, such as Authenticator App - Novaz. After setup, ORCID asks for a six-digit code, or one of your recovery codes, when you sign in.

A ORCID account is part of your security setup, so it deserves strong 2FA of its own. ORCID secures sign-ins with an authenticator app — set it up once and you're protected on every login.

2FA methods ORCID supports

  • Authenticator app (TOTP)

Before you start

  • Your ORCID sign-in details: email or ORCID iD and password, or the linked social media or institutional account you use to sign in
  • Authenticator App - Novaz installed on your iPhone or iPad
  • Your ORCID Account Settings page (orcid.org/account) open on a computer, so the QR code is on a different screen from your phone
  • A safe place for your recovery codes, such as a password manager: ORCID shows them only once
Download on the App Store

Part 1: Turn on 2FA in ORCID

  1. 1

    Open Account Settings

    Sign in to your ORCID account and go to your Account Settings page.

  2. 2

    Click Turn on two-factor authentication

    Click the "Turn on two-factor authentication" button. ORCID shows a QR code, and a text code you can type instead.

Part 2: Add ORCID to Authenticator App - Novaz

  1. 3

    Add ORCID in Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. If it won't scan, choose to enter a setup key and type the text code exactly as ORCID shows it. Name the account "ORCID", then tap "Save".

  2. 4

    Note the six-digit code

    Authenticator App - Novaz now shows a six-digit code for ORCID. The code is time-sensitive, so have it ready for the next step.

Part 3: Confirm and finish

  1. 5

    Enter the code to enable 2FA

    Back on ORCID, enter the six-digit code from Authenticator App - Novaz to enable two-factor authentication.

  2. 6

    Save your recovery codes

    ORCID now shows a list of recovery codes. Download or copy them and store them somewhere safe. This is the only time you can do it: ORCID doesn't keep a backup and can't show the list again.

  3. 7

    Know what sign-in looks like now

    After you sign in with your ORCID credentials or a linked account, ORCID asks for the six-digit code from Authenticator App - Novaz. If you don't have the app with you, choose "Enter recovery code" instead.

If something goes wrong

  • The QR code won't scan: enter the text code that ORCID shows next to it as a setup key in Authenticator App - Novaz.
  • ORCID rejects the six-digit code: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), then enter the newest code.
  • You see "Invalid recovery code": each recovery code works only once. Enter a different code from your list.
  • You forgot to save the recovery codes, or have used them all: go to Account Settings, click "Disable" to turn 2FA off, then turn it on again. ORCID generates a new list each time you enable 2FA.

Checked against ORCID's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your ORCID account

ORCID gives you a list of randomly generated recovery codes when you turn on 2FA. If you lose the device with Authenticator App - Novaz, choose "Enter recovery code" at sign-in and enter one of them; each code works only once. Once you're back in, you can disable 2FA and enable it again to add ORCID to Authenticator App - Novaz on your new device; each time you enable 2FA you get a fresh list of codes. ORCID can't show your codes again after setup, and it warns that without your 2FA app or your codes you'll lose access to your account. If that happens, contact the ORCID support team through orcid.org/help/contact-us for help restoring access.

Frequently asked questions

Does ORCID require two-factor authentication?
No. 2FA is completely optional on ORCID, and you can turn it on or off at any time in your Account Settings.
Does 2FA verify my identity as a researcher?
No. ORCID says 2FA cannot and does not verify your identity. It gives stronger support that you control both your sign-in details and the app that creates your ORCID codes.
Which 2FA apps work with ORCID?
Any 2FA app that can scan a QR code or take a key to generate one-time codes, including Authenticator App - Novaz. ORCID lists Authy, FreeOTP, Google Authenticator and Microsoft Authenticator as apps it has tested.
Do I still need a code if I sign in with my institution or a social account?
Yes. ORCID's first factor can be your email or ORCID iD and password, or a linked social media or institutional account. The six-digit code or a recovery code is the second factor.

Generate your ORCID codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Security guides

Novaz is not affiliated with, endorsed by, or sponsored by ORCID. ORCID and its logo are trademarks of their respective owner and are used here for identification only.