Salesforce 2FA: How to Set Up an Authenticator App
Your Salesforce login opens up customer records, reports and business data, so a stolen password alone shouldn't be enough to get in. Turning on two-factor authentication adds a second check at sign-in, and Salesforce accepts time-based codes from an authenticator app such as Authenticator App - Novaz.
A Salesforce account can expose source code, deploy keys, and infrastructure — prime targets for attackers. Besides an authenticator app, Salesforce also offers SMS text codes, email codes and security keys. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks. For the strongest protection, Salesforce also supports hardware security keys.
2FA methods Salesforce supports
- SMS text message
- Email code
- Authenticator app (TOTP)
- Security key (U2F / WebAuthn)
Before you start
- Your Salesforce username and password
- Access to the email inbox linked to your Salesforce account
- Authenticator App - Novaz installed on your iPhone or iPad
- Salesforce open on a computer, so you can scan its QR code with your phone
Part 1: Turn on 2FA in Salesforce
- 1
Open Settings from your profile menu
Sign in to Salesforce and click your profile picture at the upper right. Choose "Settings" from the drop-down that opens.
- 2
Register the One-Time Password Authenticator
Go to "Advanced User Details". Look for "App Registration: One-Time Password Authenticator" and click "Continue" next to it.
- 3
Enter the code Salesforce emails you
To prove the request is really yours, Salesforce sends a verification code to your email. Type that code in to move on.
- 4
Leave the QR code on screen
Salesforce now displays a QR code that holds your secret key. Leave this page up while you grab your iPhone or iPad. The code in our screenshot is just an example, so don't scan it.
Part 2: Add Salesforce to Authenticator App - Novaz
- 5
Scan the QR code with Authenticator App - Novaz
In Authenticator App - Novaz, tap + and aim your camera at the QR code on the Salesforce page in your browser.
- 6
Check the account details and save
When the scan succeeds, the app recognizes Salesforce, adds its logo, and pre-fills the account name and the secret key. Tap "Save" once it looks right. Want a different icon? Just tap the current one to change it.
Part 3: Confirm and finish
- 7
Enter the code and click Connect
Switch back to Salesforce and type the current code from Authenticator App - Novaz into the field provided. Click "Connect" and you're done: two-factor authentication is now active on your Salesforce account.
- 8
Save a way to recover your account
If Salesforce offers backup or recovery codes, download them or write them down and store them somewhere safe. They are how you get back into your account if you ever lose your phone. If it doesn't, check how Salesforce recovers accounts before you need it.
If something goes wrong
- No verification email? Check your spam or junk folder and confirm you're looking at the inbox tied to your Salesforce account.
- If the QR code won't scan, zoom in on the Salesforce page or move your phone a little closer to the screen.
- Salesforce says the code is wrong? Open your iPhone's Settings and make sure the date and time are set automatically, then try a fresh code.
- If the code ran out just as you typed it, wait for the next one to appear in the app and enter that instead.
Menu names on Salesforce can change — the official Salesforce 2FA documentation ↗ always has the exact, current path.
How to recover your Salesforce account
If you lose access to your authenticator and Salesforce gave you backup or recovery codes when you turned on 2FA, sign in with one of them; keep them somewhere safe, away from your phone. Not every service issues codes. If Salesforce doesn't, or you didn't save them, use Salesforce's account-recovery or support process (or ask your admin, for a work account) to get back in.
Frequently asked questions
- Does Salesforce work with authenticator apps like Authenticator App - Novaz?
- Yes. Salesforce supports TOTP authenticator apps, so you can generate its two-factor codes in Authenticator App - Novaz.
- Is Salesforce two-factor authentication free?
- Yes. Enabling authenticator-app 2FA on Salesforce is free — you only need the free Authenticator App - Novaz.
- What if I lose access to my Salesforce 2FA codes?
- If Salesforce gave you backup or recovery codes during setup, sign in with one of them. If it didn't, or you didn't save them, use Salesforce's account recovery or contact its support (or your admin, for a work account), then add the account to Authenticator App - Novaz again.
- Should I use an authenticator app or a security key on Salesforce?
- Salesforce supports both. An authenticator app like Authenticator App - Novaz is free and works on any phone; a hardware security key adds phishing resistance. You can enable both.
Generate your Salesforce codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Developer guides
Novaz is not affiliated with, endorsed by, or sponsored by Salesforce. Salesforce and its logo are trademarks of their respective owner and are used here for identification only.