Recovery codes

Recovery codes are single-use backup codes for two-factor authentication. If you ever lose access to your authenticator app, a recovery code lets you sign in instead of a one-time code. You get a set of them when you turn on two-factor authentication.

Save your recovery codes

When you enable two-factor authentication, Acme shows your recovery codes once. From that screen you can:

• Download Codes — save them to a text file.
• Copy Codes — copy them to your clipboard.

When you’re done, select I’ve saved my codes to close the dialog.

Caution

Store your recovery codes somewhere safe and separate from your authenticator device — a password manager is ideal. Don’t keep them only on the same phone that runs your authenticator app: if you lose that phone, you’d lose both at once. Anyone who has a recovery code can use it to sign in, so treat them like passwords.

How recovery codes work

• Each recovery code works only once. After you use one to sign in, it’s spent.
• You’re given a small set of codes, so use them sparingly — for getting back in, not as your everyday sign-in method.
• When you start running low or run out, regenerate a fresh set.

Regenerate your recovery codes

Regenerate when you’re running low, or if you think your saved codes may have been exposed.

1. Go to Settings → Security.
2. In the Two-Factor Authentication section, select Regenerate Codes.
3. Enter a current verification code from your authenticator app to confirm.
4. Save the new set of codes (download or copy them), then select I’ve saved my codes.

Danger

Regenerating invalidates all of your previous recovery codes immediately. Any old codes you saved will stop working, so replace them with the new set everywhere you’ve stored them.

Lost your device and your codes?

If you’ve lost your authenticator device and don’t have any working recovery codes, you won’t be able to complete two-factor sign-in on your own. See Sign-in problems for what to do next.