GLOSSARY

What is a 2FA recovery code?

Recovery codes are one-time backup codes that let you sign in if you lose your 2FA device. Learn how they work and store them safely.

Open the token generator →All free tools

A recovery code (or backup code) is a one-time-use code a service gives you when you enable 2FA, so you can still get in if you lose your phone or authenticator app. They are your safety net against being locked out.

Why you need them

If your only second factor is an authenticator app and you lose the device, you can be permanently locked out. Recovery codes bypass the app: each is a single-use credential that satisfies the 2FA step once. Services usually issue a batch of them at setup.

Storing them safely

Treat recovery codes like passwords — anyone with them can pass your 2FA. Store them in a password manager or a secure offline location, not in the same place as your authenticator app. Regenerate them if you suspect exposure.

Try it now — free, no signup

Use the token generator in your browser. Then, when you need it at scale with an API key and higher limits, grab the full Eveses API.

Open the token generator →Sign up for the full API

FAQ

Can I reuse a recovery code?›
No — each is single-use. Once used it is consumed, so keep the rest safe and regenerate when you run low.
Where should I store recovery codes?›
In a password manager or a secure offline place, separate from your authenticator device.

Related

What is 2FA (two-factor authentication)?Two-factor authentication adds a second proof of identity on top of your password. Learn the factor types and generate a TOTP second factor free.What is TOTP (Time-based One-Time Password)?TOTP is the 6-digit code your authenticator app shows for 2FA. Learn how time-based one-time passwords work, and generate or verify one free.How to set up TOTP two-factor authenticationSet up app-based two-factor authentication with TOTP. Step-by-step, plus a free tool to generate a secret, QR code, and verify codes.