Sign in with a recovery code

Use a recovery code when two-factor authentication is on and you cannot open your authenticator app. Each code can be used only once.

Use a saved code

1. Sign in with your usual email and password, Google or GitHub.
2. On Two-factor authentication, select Use a recovery code.
3. Enter one of the recovery codes you saved when you set up two-factor authentication.
4. Select Sign in.

Use Use your authenticator app if you want to switch back to an app code.

If a code is refused

Check the code against your saved copy. A code that was already used cannot work again. Try another unused code from the current set.

If you regenerated recovery codes, the old set no longer works. Use the new set you saved.

Keep recovery access safe

Store the codes separately from the device with your authenticator app. Do not send them to support or anyone else.

You can choose Regenerate recovery codes on the two-factor security page. This requires fresh identity and factor verification and replaces the previous set. Save the new codes when they appear.

If you lose your authenticator app and all your recovery codes, support can't turn two-factor off for you. Resetting your password does not bypass this step.