Authenticator App - Novaz

Wikipedia 2FA: How to Set Up an Authenticator App

wikipedia.org SupportedChecked against official help · September 25, 2026

Your Wikipedia login is a Wikimedia global account, so one password protects your edits across every language edition and sister project. Wikimedia calls the feature two-factor authentication (2FA) and supports authenticator apps, so Authenticator App - Novaz can supply your codes. Since December 2025, any registered user can turn it on.

Turning on 2FA for Wikipedia adds a second layer of protection, so a stolen password alone isn't enough to get in. Besides an authenticator app, Wikipedia also offers security keys. An authenticator app (TOTP) is usually the best balance of security and convenience. For the strongest protection, Wikipedia also supports hardware security keys.

2FA methods Wikipedia supports

  • Authenticator app (TOTP)
  • Security key (U2F / WebAuthn)

Before you start

  • Your Wikipedia username and password: you must be able to log in with your password, and Wikipedia may ask you to log in again before showing your 2FA settings
  • A registered account; no special user group or extended rights are needed
  • Authenticator App - Novaz installed on your iPhone or iPad
  • Wikipedia open on a computer, so the QR code is on a different screen from your phone
Download on the App Store

Part 1: Turn on 2FA in Wikipedia

  1. 1

    Open Account security

    Log in to Wikipedia and go to Special:AccountSecurity, or follow the link in your Preferences. If Wikipedia asks you to confirm it's you, log in again.

  2. 2

    Click Add an authenticator app

    Under "Two-factor authentication", click "Add an authenticator app". Skip step 1 of the form (downloading an app); you already have one.

  3. 3

    Give the app a name

    At "Step 2: Give it a name", type a label such as "iPhone Novaz", so you can tell your apps apart if you add more later.

  4. 4

    Keep the QR code on screen

    At "Step 3: Scan the QR code", Wikipedia shows a QR code, plus the secret key for manual entry. Leave the page open.

Part 2: Add Wikipedia to Authenticator App - Novaz

  1. 5

    Scan the QR code with Authenticator App - Novaz

    Open Authenticator App - Novaz, tap the + button and scan the QR code on your computer. If you can't scan it, choose to enter a setup key and type the secret key exactly as shown. Use "Wikipedia" as the account name, then tap "Save".

  2. 6

    Note the 6-digit code

    Authenticator App - Novaz now shows a 6-digit code for Wikipedia. A new one appears every 30 seconds.

Part 3: Confirm and finish

  1. 7

    Enter the code to verify

    Back on Wikipedia, at "Step 5: Verification", type the current code from Authenticator App - Novaz and submit the form. Two-factor authentication is now on.

  2. 8

    Save your recovery codes

    Wikipedia also gives you ten recovery codes on this page. Click "Download" or "Copy" and store or print them away from your phone before you leave the page. Each code works once.

If something goes wrong

  • Wikipedia says the code is wrong: make sure your iPhone sets its date and time automatically (Settings > General > Date & Time). A clock that is two minutes off is enough to break codes.
  • You log in through a Wikipedia mobile app: the apps don't support security keys, so keep an authenticator app registered, and type any recovery code in the normal code field.
  • A tool such as AutoWikiBrowser can't log in: use bot passwords or OAuth for tools, and keep 2FA on your main account.
  • You got a new phone: add Authenticator App - Novaz on it at Special:AccountSecurity first, then remove the old authenticator app.

Checked against Wikipedia's own help pages on September 25, 2026. Menu names can change, so these pages have the current path:

How to recover your Wikipedia account

Wikipedia issues ten single-use recovery codes when you turn on 2FA, and you can view them again on Special:AccountSecurity while logged in. If you lose the phone with Authenticator App - Novaz, log in with your password, click "Use recovery codes" on the two-factor screen and enter one. Then add the app on your new phone, remove the lost device and generate a fresh set of codes. With no device and no codes left, email ca@wikimedia.org from the address on your account and ask for 2FA to be removed. That's a last resort: the Wikimedia Foundation doesn't guarantee recovery.

Frequently asked questions

Can any Wikipedia user turn on two-factor authentication?
Yes. Since December 2025, 2FA is available to all registered users on Wikimedia projects; before that it was limited to users with certain extended rights. Some privileged groups, such as checkusers and oversighters, must use it.
Does 2FA cover other language Wikipedias and Wikimedia sites?
Yes. It's set on your Wikimedia global account, which you use on every Wikipedia, Meta-Wiki and the other public projects. Only private wikis need a separate setup.
Will Wikipedia still email me login codes?
No. Accounts without 2FA are sometimes asked for an emailed code on unfamiliar devices. With 2FA on, that step no longer applies.
Can I get codes by text message or use a passkey?
Wikimedia has no plans to support SMS codes. You can add several authenticator apps and security keys, and once one is set up, click "Add a passkey" on Special:AccountSecurity to log in with your fingerprint, face scan or device PIN.

Generate your Wikipedia codes in Authenticator App - Novaz

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Other guides

Novaz is not affiliated with, endorsed by, or sponsored by Wikipedia. Wikipedia and its logo are trademarks of their respective owner and are used here for identification only.