Authenticator App - Novaz

Railway 2FA: How to Set Up an Authenticator App

railway.app SupportedChecked against official help · September 25, 2026

Your Railway account holds your projects and billing, and on Railway 2FA guards destructive actions as well as sign-in. Railway calls the feature multi-factor authentication (MFA), with two-factor authentication (2FA) as the authenticator-app option, and supports most TOTP apps, including Authenticator App - Novaz. Railway's account pages and docs are on railway.com.

A Railway account can hold your files and backups of everything else, so protect it with 2FA. Railway secures sign-ins with an authenticator app — set it up once and you're protected on every login.

2FA methods Railway supports

  • Authenticator app (TOTP)

Before you start

  • Your Railway login details
  • Authenticator App - Novaz installed on your iPhone or iPad
  • The Railway dashboard open on a computer, so the QR code is on a different screen from your phone
  • A safe place for the recovery codes Railway gives you after setup
  • If a workspace you belong to has "Require 2FA" on, you'll be prompted to set this up before you can access that workspace
Download on the App Store

Part 1: Turn on 2FA in Railway

  1. 1

    Open Account Settings

    Sign in to Railway, click your profile photo in the top right and select "Account Settings".

  2. 2

    Go to the Account Security page

    Open the Account Security page (railway.com/account/security). This is also where you see your active browser and CLI sessions.

  3. 3

    Click Set up two-factor authentication

    Click the "Set up two-factor authentication" button. Railway shows a QR code for the initial pairing of your authenticator app. Keep this page open.

Part 2: Add Railway to Authenticator App - Novaz

  1. 4

    Scan the QR code with Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. Check the account name, then tap "Save".

  2. 5

    Note the verification code

    Authenticator App - Novaz now shows a time-based code for Railway. It changes regularly, so have it ready for the next step.

Part 3: Confirm and finish

  1. 6

    Enter the code to confirm

    Back on Railway, enter the verification code from Authenticator App - Novaz to confirm setup.

  2. 7

    Store your recovery codes

    After setup, Railway gives you a set of recovery codes. Treat them like passwords and store them in a safe place.

  3. 8

    Know when Railway will ask for a code

    From now on, Railway asks for a code from Authenticator App - Novaz each time you sign in, and also asks for extra verification before destructive actions.

If something goes wrong

  • Railway rejects the code: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), then enter the newest code.
  • The code changed while you were typing: wait for the next one in Authenticator App - Novaz and enter that instead.
  • You can't open a workspace: if a workspace admin turned on "Require 2FA", you must set up 2FA before you can view or interact with that workspace's projects.
  • You've used most of your recovery codes: generate a new set from your Account Security settings page, where you can also view your current codes.

Checked against Railway's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your Railway account

Railway's recovery codes are your way back in: they serve as an alternative login method if you lose access to Authenticator App - Novaz. Each code works only once, and when you've used most of them you can view and regenerate a new set on your Account Security settings page. If you've lost both your authenticator and your recovery codes, Railway staff say on Central Station that they can help reset 2FA: email Railway support from the email address on the locked account, which ties the request to that account so Railway can run its standard verification.

Frequently asked questions

Which authenticator apps work with Railway?
Railway supports most TOTP applications and names Google Authenticator, Authy and 1Password as examples. Authenticator App - Novaz generates the same kind of time-based codes.
Can I use a passkey instead?
Railway also supports passkeys as a second step, using your device's fingerprint, face recognition or PIN. Click "Add Passkey" on the Account Security settings page to register one.
Can my team force me to use 2FA?
Yes, on the Pro plan and above. Workspace admins who have 2FA on can toggle "Require 2FA" in the workspace's People settings, and members without 2FA are prompted to set it up before accessing the workspace. Project and workspace tokens used for CI/CD keep working without 2FA.
Can I turn 2FA off?
Yes, from your Account Security settings page, although Railway doesn't recommend it. If your workspace enforces 2FA, you'll need it to access that workspace.

Generate your Railway codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Cloud guides

Novaz is not affiliated with, endorsed by, or sponsored by Railway. Railway and its logo are trademarks of their respective owner and are used here for identification only.