Authenticator App - Novaz

SAPO Mail 2FA: How to Set Up an Authenticator App

mail.sapo.pt SupportedChecked against official help · September 25, 2026

Your SAPO Mail address is part of a single SAPO account that also signs you in to other SAPO services through SAPO Login. SAPO calls the feature two-step authentication ("autenticação em dois passos") and supports TOTP apps such as Google Authenticator, so Authenticator App - Novaz works. You turn it on in SAPO ID at id.sapo.pt.

Your SAPO Mail inbox is the master key to your other accounts — attackers use it to reset passwords everywhere. Besides an authenticator app, SAPO Mail also offers SMS text codes and security keys. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks. For the strongest protection, SAPO Mail also supports hardware security keys.

2FA methods SAPO Mail supports

  • Authenticator app (TOTP)
  • SMS text message
  • Security key (U2F / WebAuthn)

Before you start

  • Your SAPO Mail address and password: two-step authentication requires a password on the account, and SAPO Mail accounts always sign in with one
  • An active password recovery method, meaning a recovery email address or mobile number in SAPO ID, because two-step authentication requires one
  • Authenticator App - Novaz installed on your iPhone or iPad
  • SAPO ID open on a computer, so the setup window is on a different screen from your phone
  • If you use an email app over IMAP or POP: two-step authentication doesn't cover those connections, and SAPO recommends blocking them
Download on the App Store

Part 1: Turn on 2FA in SAPO Mail

  1. 1

    Sign in to SAPO ID

    Go to id.sapo.pt, click Sign in ("Entrar") and sign in with your SAPO Mail address and password, checking first that the page address is https://login.sapo.pt/.

  2. 2

    Check your recovery details

    Open the Recovery details page ("Dados de recuperação"). If there's no recovery email or mobile number yet, add one and enter the validation code SAPO sends by email or SMS.

  3. 3

    Open Security and find two-step authentication

    Open the Security page ("Segurança") and go to the Two-step authentication section ("Autenticação em dois passos").

  4. 4

    Add Google Authenticator or TOTP

    Choose to add Google Authenticator or TOTP ("Adicionar Google Authenticator ou TOTP"). In the setup window, set a profile name for your authentication device and its key. The window also shows a QR code you can scan for automatic setup.

Part 2: Add SAPO Mail to Authenticator App - Novaz

  1. 5

    Add SAPO in Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. If the camera can't read it, choose to enter a setup key and type the key from the SAPO setup window exactly, using "SAPO" as the account name, then tap "Save".

  2. 6

    Note the code

    Authenticator App - Novaz now shows a code for your SAPO account. SAPO's codes are valid for only 30 seconds, so use the current one.

Part 3: Confirm and finish

  1. 7

    Finish setup and sign in with a code

    Complete the setup window in SAPO ID. From now on, after your password at login.sapo.pt, SAPO asks for an additional verification code ("código de verificação adicional"): enter the code from Authenticator App - Novaz.

  2. 8

    Block IMAP/POP in SAPO Mail

    Sign in at mail.sapo.pt, open Settings ("Definições"), go to the Security tab ("Segurança") and turn on Block IMAP/POP ("Bloquear IMAP/POP"). SAPO recommends this because IMAP and POP can't use a second factor.

  3. 9

    Save a way to recover your account

    If SAPO Mail offers backup or recovery codes, download them or write them down and store them somewhere safe. They are how you get back into your account if you ever lose your phone. If it doesn't, check how SAPO Mail recovers accounts before you need it.

If something goes wrong

  • You can't turn on two-step authentication: check that your account has a password and that a recovery email or mobile number is active under Recovery details ("Dados de recuperação"). SAPO requires both.
  • SAPO rejects the code: codes are valid for only 30 seconds, so enter a fresh one. Also make sure your iPhone sets its date and time automatically (Settings > General > Date & Time).
  • Your email app stopped connecting: that's the effect of Block IMAP/POP ("Bloquear IMAP/POP"). If you turn it off again, IMAP and POP connections aren't protected by two-step authentication.

Checked against SAPO Mail's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your SAPO Mail account

SAPO's help doesn't describe backup codes for two-step authentication, and warns that if you lose access to the profile in your authenticator app, you may lose access to your SAPO account. So keep a backup of your authenticator setup, and don't delete Authenticator App - Novaz or its SAPO entry before turning off this method in SAPO ID, for example when you change phones. Your recovery email or mobile number is for a forgotten password: choose I forgot my password ("Esqueci-me da Password") on the sign-in page and SAPO sends a code there. SAPO says this process is fully automatic and its support team can't change passwords or recovery details on request, even if you send identity documents.

Frequently asked questions

Which second factors does SAPO offer?
SMS codes to the mobile number in your recovery details, TOTP authenticator apps such as Google Authenticator or Authenticator App - Novaz, and a YubiKey.
Does two-step authentication protect Outlook or my phone's mail app?
Not over IMAP or POP, because those protocols aren't compatible with a second factor. SAPO recommends turning on Block IMAP/POP ("Bloquear IMAP/POP") in SAPO Mail's security settings if you use two-step authentication.
Does this protect my other SAPO services too?
Yes. SAPO ID manages the single SAPO account you use at login.sapo.pt for services such as SAPO Mail, Blog SAPO and SAPO Emprego.

Generate your SAPO Mail codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Email guides

Novaz is not affiliated with, endorsed by, or sponsored by SAPO Mail. SAPO Mail and its logo are trademarks of their respective owner and are used here for identification only.