Recovery codes

Recovery codes

When you enable two-factor authentication, you're given a set of recovery codes. Each one is one-time only — once you've used a code, it stops working and can't be used again. Keep them somewhere safe, such as a password manager.

Using a recovery code

If you lose access to your authenticator app, select Use a recovery code on the two-factor screen at sign-in, then enter one of your unused codes in the Recovery Code field and select Verify. You're signed in the same as if you'd entered a normal 6-digit code.

Regenerating your codes

If you're running low on unused codes, or think they may have been seen by someone else, go through Manage Two-Factor Authentication again to generate a fresh set. The moment you do, your old recovery codes stop working, even the ones you never used — so save the new set before closing the page. Because this restarts setup, it also issues a new authenticator key — your current authenticator entry will stop working, so scan the new QR code when prompted.

See also Two-factor authentication.