Do I need a phone for NordPass MFA?

No. NordPass names Google Authenticator, Microsoft Authenticator and Authy, “or any other”, and all it checks is the six-digit code. The Authenticator extension reads the QR code straight off the Nord Account page and generates the codes in Chrome — outside NordPass, which is where the code for NordPass should be.

Will MFA also apply to NordVPN and NordLocker?

Yes. MFA is asked for when you sign in to your Nord Account, and that one account signs you in to NordPass, NordVPN and NordLocker. After that, NordPass still asks for your Master Password to unlock the vault.

What if I lose access to my authenticator?

At the MFA step select “See other options” → “Enter one of your backup codes”. Without backup codes, contact NordPass Support. On NordPass Business, choose “Use Another Method” at sign-in, or ask your NordPass admin to reset your MFA.

Why does NordPass say my MFA code is wrong?

Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. NordPass also reminds you that the code comes from your authenticator, not your email, and that MFA must be set up on the same email address as your NordPass account.

NordPass Authenticator App — Set Up MFA for Your Nord Account

NordPass holds the passwords to everything else, and the Nord Account it signs in with also opens NordVPN and NordLocker. With multi-factor authentication on, a stolen account password is not enough: whoever signs in also needs the six-digit code from your authenticator, and your Master Password is still needed to open the vault. NordPass can store 2FA codes for your other accounts, but the Nord Account’s own code belongs somewhere else.

Turn on MFA for your Nord Account

MFA is set on your Nord Account, not in NordPass itself — the “Multi-factor Authentication (MFA)” toggle in NordPass settings takes you there — so it applies to NordVPN and NordLocker as well. NordPass Business accounts work differently: your organization’s admin decides whether you need an authenticator app, a security key or both, and NordPass asks you to set it up when you sign in.

Sign in to your Nord Account at nordaccount.com on your computer.
Click your account name in the top right corner, choose “Account Settings” and switch to the “Multi-factor authentication (MFA)” section.
Click “Manage MFA” and enter the verification code Nord sends to your email.
Click “Set up” next to “Authenticator app”. Nord shows a QR code and a key.
Leave the QR code on the screen and add it to the extension as described below — then click “Continue” and enter the six-digit code from the extension.

NordPass’s own instructions

Add NordPass to Authenticator

Install 2FA Authenticator from the Chrome Web Store and pin it to the toolbar, so its icon is one click away.
Leave the NordPass page with the QR code open. Click the Authenticator icon, then “Add Account” → “QR Code” → “Scan QR from screen”.
The account appears in the list with a six-digit code that changes every 30 seconds. Rename it if you like — the name is only for you.
Go back to NordPass and type the current code into the confirmation field. If it is about to expire, wait for the next one.
NordPass confirms that two-factor authentication is on. From now on it will ask for a code when you sign in — click the extension icon and copy it.

No QR code, or it will not scan? Look for the option to enter a key manually on NordPass’s setup screen, copy the key, and add it in the extension with “Add Account” → “Manual” → “Secret Key”.

Get 2FA Authenticator for Chrome — free

Save your Nord Account backup codes

Before setup finishes, Nord shows a set of one-time backup codes with “Copy” and “Print” buttons. Save them somewhere other than this computer — Nord suggests cloud storage or a paper copy in a hidden place — and click “Continue”. You can see them again, or get a new set, under Account Settings → Multi-factor authentication (MFA) → Manage MFA, after verifying your email.

The code is not accepted?

Almost always the computer’s clock. The codes are calculated from the current time, so a clock that is a minute off produces codes that look right and are refused. Turn on automatic date and time in your system settings — step-by-step for Windows, macOS and Linux.

If the clock is right, check the key itself: paste it into the TOTP code generator and compare the code with the one in the extension. If they differ, the key was copied wrong — add the account again.

Questions

Do I need a phone for NordPass MFA?: No. NordPass names Google Authenticator, Microsoft Authenticator and Authy, “or any other”, and all it checks is the six-digit code. The Authenticator extension reads the QR code straight off the Nord Account page and generates the codes in Chrome — outside NordPass, which is where the code for NordPass should be.
Will MFA also apply to NordVPN and NordLocker?: Yes. MFA is asked for when you sign in to your Nord Account, and that one account signs you in to NordPass, NordVPN and NordLocker. After that, NordPass still asks for your Master Password to unlock the vault.
What if I lose access to my authenticator?: At the MFA step select “See other options” → “Enter one of your backup codes”. Without backup codes, contact NordPass Support. On NordPass Business, choose “Use Another Method” at sign-in, or ask your NordPass admin to reset your MFA.
Why does NordPass say my MFA code is wrong?: Usually the computer clock is off by a minute or more. Turn on automatic date and time and try the next code. NordPass also reminds you that the code comes from your authenticator, not your email, and that MFA must be set up on the same email address as your NordPass account.

Your codes, one click from the login page

Authenticator keeps your 2FA codes in the browser, on your device only — free to use, open source, no account and no phone needed. Local backups and optional password protection come built in.