Which authenticator app works with Canva?

Any app that produces standard six-digit codes that change every 30 seconds — Canva leaves the choice to you. The Authenticator extension reads the QR code straight off the Canva settings page and generates the codes in Chrome, so no phone is needed.

What if I lose access to my authenticator?

Log in with one of your backup codes, then disable the authenticator app and enable it again to set it up anew. Without backup codes, Canva’s account recovery form is the way to ask for access back — which is why copying the codes, and keeping the extension’s automatic backups on, matters.

Why does Canva say my code is incorrect?

Canva’s own advice: let the current code expire and enter the new one straight away, and make sure your date and time sync automatically — on a computer, turn on automatic date and time in the system settings. If it still fails, check you are copying the code of the right Canva account in the extension.

Why can’t I turn on MFA in Canva?

Check three things: your email address is verified, the account has a password (Settings → Login → Password), and it is not managed by your organization’s single sign-on — Canva does not offer MFA for SSO-managed accounts.

Canva Authenticator App — Turn On Multi-Factor Authentication

A Canva account holds your designs, uploads and brand kits — and, on a paid plan, the subscription and the team that work in it. Someone with your password can download, change or delete all of it. With MFA on, Canva asks for the six-digit code from your authenticator each time you log in, so a leaked password alone no longer opens the account.

Turn on multi-factor authentication in Canva

Canva needs a verified email address and a password on the account first — if you have always logged in another way and have no password, set one under Settings → Login → Password. MFA is not available for accounts managed by single sign-on (SSO).

Sign in at canva.com on your computer, select your account profile on the homepage and choose “Your account”.
Select “Account and security”.
In the “Security” section, under “Multi-Factor Authentication (MFA)”, select “Enable” next to “Authenticator app”.
Enter your password and select “Confirm password”.
Canva shows a QR code. Leave it on the screen and add it to the extension as described below — or select “Show secret key” to copy the key — then enter the code from the extension and select “Enable authenticator app”.

Canva’s own instructions

Add Canva to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the Canva page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to Canva and type the current code into the confirmation field. If it is about to expire, wait for the next one.
Canva confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on Canva’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Copy your Canva backup codes

Right after you enable the app, Canva shows backup codes: select “Copy codes”, store them somewhere other than this computer, and select “Finish setup”. Each code works once. If you use them up or lose them, the same MFA section has “Backup codes” with “Generate” or “Regenerate” — make a new set and keep it just as carefully.

The code is not accepted?

Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.

If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Which authenticator app works with Canva?: Any app that produces standard six-digit codes that change every 30 seconds — Canva leaves the choice to you. The Authenticator extension reads the QR code straight off the Canva settings page and generates the codes in Chrome, so no phone is needed.
What if I lose access to my authenticator?: Log in with one of your backup codes, then disable the authenticator app and enable it again to set it up anew. Without backup codes, Canva’s account recovery form is the way to ask for access back — which is why copying the codes, and keeping the extension’s automatic backups on, matters.
Why does Canva say my code is incorrect?: Canva’s own advice: let the current code expire and enter the new one straight away, and make sure your date and time sync automatically — on a computer, turn on automatic date and time in the system settings. If it still fails, check you are copying the code of the right Canva account in the extension.
Why can’t I turn on MFA in Canva?: Check three things: your email address is verified, the account has a password (Settings → Login → Password), and it is not managed by your organization’s single sign-on — Canva does not offer MFA for SSO-managed accounts.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.