Backup codes

Backup codes, explained

Backup codes, also called recovery codes, are a list of one-time codes a service gives you when you turn on two-factor authentication. Each code works once, in place of your usual SMS code, authenticator code or push approval. They exist for the day you lose your phone, change numbers, or cannot access your authenticator app. Without them, getting back into an account can mean a slow recovery process or, for some services, losing the account entirely. Store backup codes somewhere safe and separate from your phone, such as a password manager or a printed copy kept at home, and never share them. If you think someone has seen them, generate a new set, which cancels the old ones. Backup codes are especially important if you signed up for an account with a temporary number: that number is recycled after use, so it cannot receive future codes. Add an authenticator app or passkey, save the backup codes, and your account no longer depends on a number you do not control.

Two-factor authentication guide →