Backup codes

Backup codes sign you in when your authenticator app is not to hand. You get 10 when you turn on two-factor authentication, each 8 characters long, and each works once. You can make a new set at any time.

How to use one

1. 1.

   Sign in with your password as usual.

2. 2.

   On Verify it's you, choose Use a backup code instead.

3. 3.

   Type one code into Backup code and choose Verify and sign in.

Spaces are ignored, and lowercase letters work too. That code is now used and will not work again.

How to make a new set

1. 1.

   Open Settings → Security and find Backup Codes. It shows how many are left, for example 7 of 10 codes remaining.

2. 2.

   Choose Regenerate, then Regenerate again in Regenerate your backup codes?

3. 3.

   Save the 10 new codes under Save your new codes, with Copy all if you like, and choose Done.

What happens next

Your old codes stop working at once, used or not, and we email you that a new set was made. The new codes are shown only this once: we keep only a scrambled form of each, so we cannot show them again.

Rules and limits

• Backup Codes appears only while two-factor authentication is on.
• Turning two-factor authentication off deletes your codes. Turning it on again gives you a new set.
• A wrong backup code counts towards the same limit as a wrong app code: after 5 wrong tries, checks stop for 15 minutes.
• Keep the codes away from the phone with the app on it, since they are for the day that phone is lost.

If something goes wrong

"Please enter a valid 8-character backup code"

The code is not 8 characters long. Type it again.

"Invalid backup code"

It was mistyped, already used, or from an older set.

"Failed to regenerate backup codes."

No new set was made, and your old codes still work. Try again.

You have used them all

Sign in with the app, then make a new set with Regenerate.