Authenticator App - Novaz

University of Oxford 2FA Setup Guide

ox.ac.uk SupportedChecked against official help · September 26, 2026

Your Oxford Single Sign-On (SSO) account opens the University's online services, so it's protected with multi-factor authentication (MFA) through Microsoft. Microsoft Authenticator is the recommended default, but Oxford supports other authenticator apps such as Authy, Duo, Google Authenticator and Zoho OneAuth, so Authenticator App - Novaz works too.

A University of Oxford account holds coursework, records, and personal data worth protecting with 2FA. Besides an authenticator app, University of Oxford also offers SMS text codes, a proprietary app and phone-call codes. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.

2FA methods University of Oxford supports

  • Authenticator app (TOTP)
  • SMS text message
  • Proprietary app
  • Phone call

Before you start

  • Your Oxford SSO username (in the form abcd1234@ox.ac.uk) and password
  • Your current MFA method, if MFA is already on for your account: you need it to add a new one
  • Authenticator App - Novaz installed on your iPhone or iPad
  • A web browser on a computer, so the QR code is on a different screen from your phone
Download on the App Store

Part 1: Turn on 2FA in University of Oxford

  1. 1

    Open My Sign-Ins

    In a web browser, go to mysignins.microsoft.com/security-info and sign in with your SSO username (abcd1234@ox.ac.uk), your SSO password and, if asked, your current MFA method.

  2. 2

    Add a sign-in method

    Select "+Add sign-in method" and choose "Microsoft Authenticator".

  3. 3

    Choose a different authenticator app

    Select "I want to use a different authenticator app", then "Next". A QR code appears; keep it on screen.

Part 2: Add University of Oxford to Authenticator App - Novaz

  1. 4

    Scan the QR code with Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code. If you can't scan it, select "Can't scan image" in the browser and type the secret key into Novaz instead. Use "Oxford SSO" as the account name and tap "Save".

  2. 5

    Note the 6-digit code

    Authenticator App - Novaz now shows a 6-digit code for your Oxford account. If you're asked how many digits to use, choose 6.

Part 3: Confirm and finish

  1. 6

    Enter the code

    Back in the browser, select "Next" and enter the current code from Authenticator App - Novaz.

  2. 7

    Keep a second method

    Keep another method set up too. SMS and phone-call methods stop working on 1 February 2027, so choose another app or a security key as your backup.

If something goes wrong

  • The code is rejected: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time), then enter the newest code.
  • You can't add a security key: Oxford needs another method set up first, so add Authenticator App - Novaz before the key.
  • You still use SMS or phone calls: these methods stop working on 1 February 2027, so add an authenticator app before then.
  • Your phone was lost or stolen: if you can still sign in with another method, remove the methods on the missing device in My Sign-Ins and choose "Sign out everywhere".

Checked against University of Oxford's own help pages on September 26, 2026. Menu names can change, so these pages have the current path:

How to recover your University of Oxford account

If you lose the phone with Authenticator App - Novaz but can still sign in with another method, remove the methods on the missing device in My Sign-Ins, choose "Sign out everywhere", then add Authenticator App - Novaz on your new phone. If you can't sign in at all, your local IT support team can reset your MFA; if you can't reach them, contact the central IT Service Desk. Oxford's pages don't mention backup codes.

Frequently asked questions

Do I have to use Microsoft Authenticator?
No. Microsoft Authenticator is Oxford's recommended default, but other authenticator apps such as Authy, Duo, Google Authenticator and Zoho OneAuth are supported, and Authenticator App - Novaz works the same way.
When do SMS and phone-call methods stop working?
On 1 February 2027. Add an authenticator app or a security key before then.
Who resets my MFA if I'm locked out?
Your local IT support team. If you can't reach them, contact the University's central IT Service Desk.

Generate your University of Oxford codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Education guides

Novaz is not affiliated with, endorsed by, or sponsored by University of Oxford. University of Oxford and its logo are trademarks of their respective owner and are used here for identification only.