T-Online 2FA: How to Set Up an Authenticator App
Your T-Online email is reached with your Telekom Login, the same username (email address) and password you use for the Telekom E-Mail Center, the Telekom Mail app, MagentaCLOUD, the Kundencenter and the MeinMagenta app. Telekom calls the feature multi-factor authentication ("Mehr-Faktor-Authentifizierung") and supports any authenticator app that uses the OTP standard, so Authenticator App - Novaz can supply your 6-digit confirmation codes.
Your T-Online inbox is the master key to your other accounts — attackers use it to reset passwords everywhere. Besides an authenticator app, T-Online also offers SMS text codes. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.
2FA methods T-Online supports
- SMS text message
- Authenticator app (TOTP)
Before you start
- Your Telekom Login: your username (email address) and password
- A smartphone, which Telekom lists as the requirement for multi-factor authentication
- Authenticator App - Novaz installed on your iPhone
- Your Telekom Login settings ("Login-Einstellungen") open on a computer, so the QR code is on a different screen from your phone
Part 1: Turn on 2FA in T-Online
- 1
Sign in to your Login settings
Open your Telekom Login settings ("Login-Einstellungen") at account.idm.telekom.com, or from the Kundencenter, and sign in with your Telekom Login.
- 2
Click Set up multi-factor authentication
Click "Mehr-Faktor-Authentifizierung einrichten" (Set up multi-factor authentication).
- 3
Choose the app method
Choose "Bestätigungscode per App" (confirmation code via app). Telekom shows a QR code; keep the page open.
Part 2: Add T-Online to Authenticator App - Novaz
- 4
Scan the QR code in Authenticator App - Novaz
Open Authenticator App - Novaz, tap the + button and scan the QR code with your iPhone camera. Check the account name, then tap "Save".
- 5
Note the 6-digit code
Authenticator App - Novaz now shows a six-digit confirmation code ("Bestätigungscode") for your Telekom Login. It changes every 30 seconds, so have it ready for the next step.
Part 3: Confirm and finish
- 6
Enter the code in your browser
Back in your browser, enter the code from Authenticator App - Novaz.
- 7
Choose when codes are requested
Choose whether codes are requested "Nur bei wichtigen Aktionen" (only for important actions, such as changing your email address) or "Bei jeder Anmeldung und bei wichtigen Aktionen" (at every login and for important actions). Telekom recommends the second for the highest protection.
- 8
Confirm with Fortfahren
Confirm the summary with the "Fortfahren" (Continue) button. Multi-factor authentication is now set up.
- 9
Save a way to recover your account
If T-Online offers backup or recovery codes, download them or write them down and store them somewhere safe. They are how you get back into your account if you ever lose your phone. If it doesn't, check how T-Online recovers accounts before you need it.
If something goes wrong
- The code is rejected: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), then enter the newest code.
- You're never asked for a code when you sign in: with "Nur bei wichtigen Aktionen", codes are only requested for security-relevant actions. Change this under "Abfrage von Bestätigungscodes" in the "Sicherheit" (Security) area of your Login settings.
- MagentaTV on some devices won't sign in with multi-factor authentication: Telekom says this isn't possible yet for technical reasons, and you can keep signing in there with your Telekom Login username and password.
- You picked SMS and the code doesn't arrive: it may have been flagged as spam, delayed, or sent to another MultiSIM card, since only the SIM selected for SMS receives it. Without a Telekom mobile number, Telekom recommends the app.
Checked against T-Online's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:
How to recover your T-Online account
Telekom's help pages don't describe backup codes or a recovery key for multi-factor authentication, and they don't say how to get back in if you lose the phone with Authenticator App - Novaz. While you still have access, you can view and change your multi-factor settings at any time in the "Sicherheit" (Security) area of your Login settings, so review them before you switch phones.
Frequently asked questions
- Which authenticator apps work with the Telekom Login?
- Telekom recommends Google Authenticator, Microsoft Authenticator or Twilio Authy, and says any other authenticator app that supports the OTP standard can be used too, including Authenticator App - Novaz.
- Is the app better than SMS codes?
- Telekom considers app authentication more secure because it works independently of the mobile network and is less vulnerable to phishing. If you don't use a Telekom mobile number, Telekom recommends the app.
- Will Telekom ask for a code every time I sign in?
- Only if you choose "Bei jeder Anmeldung und bei wichtigen Aktionen". Then you enter a code after your login details, for example in the MeinMagenta app and the Kundencenter. With "Nur bei wichtigen Aktionen", no code is needed to sign in, only for actions such as changing your email address.
- Does multi-factor authentication cost anything?
- No. Telekom describes it as free additional protection for your Telekom Login.
Generate your T-Online codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Email guides
Novaz is not affiliated with, endorsed by, or sponsored by T-Online. T-Online and its logo are trademarks of their respective owner and are used here for identification only.



