Authenticator App - Novaz

Web.de 2FA: How to Set Up an Authenticator App

web.de SupportedChecked against official help · September 25, 2026

Your WEB.DE account holds your mailbox. With two-factor authentication ("Zwei-Faktor-Authentifizierung"), every login needs a confirmation code as well as your password. The codes come from an authentication app ("Authentifizierungs-App") such as Authenticator App - Novaz, and setup also needs the WEB.DE Mail App to approve the change.

Your Web.de inbox is the master key to your other accounts — attackers use it to reset passwords everywhere. Web.de secures sign-ins with an authenticator app — set it up once and you're protected on every login.

2FA methods Web.de supports

  • Authenticator app (TOTP)

Before you start

  • Your WEB.DE email address and password
  • The current version of the WEB.DE Mail App on your smartphone, signed in with notifications turned on: WEB.DE requires it to confirm setup
  • A mobile phone number that can receive SMS, which WEB.DE verifies during setup and needs for password recovery
  • Your postal address up to date: customer service can post new access details there if you lose your secret key
  • Authenticator App - Novaz installed on your iPhone or iPad. WEB.DE warns not to delete your authentication app once setup is done
Download on the App Store

Part 1: Turn on 2FA in Web.de

  1. 1

    Open Account verwalten

    Log in to your mailbox on the WEB.DE website, click the icon with your initials in the top menu bar, then "Account verwalten" (Manage account). The WEB.DE Kundencenter opens.

  2. 2

    Go to Login & Sicherheit

    Click "Login & Sicherheit" (Login & security) on the left and scroll to the bottom. Under "Zwei-Faktor-Authentifizierung", click "Zwei-Faktor-Authentifizierung aktivieren" (Activate two-factor authentication).

  3. 3

    Start the setup wizard

    Click "Jetzt Einrichtung starten" (Start setup now), read the notice and click "Ja, weiter" (Yes, continue). Enter your WEB.DE password and click "Jetzt starten" (Start now).

  4. 4

    Approve in the WEB.DE Mail App

    On your phone, tap the push notification from "WEB.DE Sicherheit", tap "Ja, das war ich" (Yes, that was me), then return to the wizard.

  5. 5

    Verify your mobile number

    Enter your mobile number, or check the one shown and click "Ändern" (Change) if it's out of date. Click "SMS anfordern" (Request SMS), enter the code from the text message and click "Weiter" (Next).

Part 2: Add Web.de to Authenticator App - Novaz

  1. 6

    Add WEB.DE in Authenticator App - Novaz

    The wizard shows a QR code. Open Authenticator App - Novaz, tap the + button and scan it. If it won't scan, click "Code in die Zwischenablage kopieren" (Copy code to clipboard) under the QR code, get the code onto your phone and paste it as a setup key in the app. Tap "Save".

Part 3: Confirm and finish

  1. 7

    Enter the 6-digit code

    Enter the 6-digit code shown in Authenticator App - Novaz and click "Weiter" (Next).

  2. 8

    Save your secret key

    Click "Geheimschlüssel sichern (PDF)" (Save secret key) to download your emergency secret key. Keep the PDF safe; WEB.DE recommends printing it.

  3. 9

    Activate two-factor authentication

    Check your personal details, click "Weiter" (Next), then "Jetzt aktivieren" (Activate now). Log in once more in the WEB.DE Mail App and WEB.DE MailCheck, and re-enable POP3/IMAP in your email settings if you use it.

  4. 10

    Save a way to recover your account

    If Web.de offers backup or recovery codes, download them or write them down and store them somewhere safe. They are how you get back into your account if you ever lose your phone. If it doesn't, check how Web.de recovers accounts before you need it.

If something goes wrong

  • No push notification arrives: log out of the WEB.DE Mail App, log back in and start the setup again.
  • No SMS code arrives: click "SMS erneut senden" (Resend SMS) and check that the number is current.
  • The QR code is on the phone that runs the app: tap "Code kopieren" (Copy code) under it and paste the code into Authenticator App - Novaz.
  • Your mail program, calendar or contacts app stopped connecting: create an app-specific password ("anwendungsspezifisches Passwort") and log in with it there.

Checked against Web.de's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your Web.de account

WEB.DE's fallback is the single-use secret key ("Geheimschlüssel") from the setup PDF. If you lose access to your authentication app or forget your password, go to passwort.web.de, enter your email address, solve the security check and confirm it's you through your stored mobile number or email address. Enter the secret key and click "Weiter" (Next); this turns off two-factor authentication. Set a new password with "Passwort speichern" (Save password), then set two-factor authentication up again. If the PDF is lost too, use the WEB.DE help chat (speech-bubble icon, bottom right of the help pages): customer service can post access information to your stored postal address, but only if it can identify you as the account holder.

Frequently asked questions

Do I need the WEB.DE Mail App every time I log in?
No. You need the current WEB.DE Mail App to approve the setup with a push notification. Your login codes come from your authentication app, such as Authenticator App - Novaz.
How do I move WEB.DE to a new smartphone?
WEB.DE lists a new smartphone as a case for your secret key: use it at passwort.web.de to turn off two-factor authentication, then set it up again on the new phone.
Can I skip the code on my own computer?
Yes. At login, tick "Für dieses Gerät merken" (Remember this device), but only on a trusted device. Unticking it later doesn't reset it; only deleting that browser's cookies does.

Generate your Web.de codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Email guides

Novaz is not affiliated with, endorsed by, or sponsored by Web.de. Web.de and its logo are trademarks of their respective owner and are used here for identification only.