What are recovery codes and how do I use them?

Recovery codes are single-use backup codes generated when you enable two-factor authentication or add a passkey. They let you access your account if you lose your authenticator app or your device.

When you set up 2FA or add a passkey, you are shown 10 recovery codes once. Copy them somewhere safe; a password manager or a printed sheet stored securely are good options. Each code works once only; once used it cannot be used again.

To use a recovery code at login, enter your password as normal, then choose "Use a recovery code instead" when the 2FA prompt appears. Enter one code and your account will unlock. That code is immediately marked as used.

If you start running low on codes, go to Security Settings and click "Regenerate recovery codes". You will get a fresh set of 10 and all your previous codes, including any unused ones, are cancelled immediately. We prompt you to regenerate when you have 2 codes remaining.

If you have no codes left and cannot access your authenticator, contact us at [email protected]. We will ask you to verify account ownership before manually resetting your 2FA. This takes longer than using a recovery code, so keeping your codes stored safely is important.