After successfully setting up two-factor authentication via a TOTP mobile application , the Two-factor recovery codes (https://[hostname]/settings/auth/recovery-codes) page lists your valid recovery codes. We strongly recommend saving your recovery codes in a safe place, like a password manager. If you're unable to save them immediately, you can download them at any point after enabling two-factor authentication.

Treat your recovery codes with the same level of attention as you would your password! They should not be shared or distributed. We recommend saving them with a password manager such as LastPass, 1Password, or Keeper.

  1. Settings icon in the user barIn the upper-right corner of any page, click your profile photo, then click Settings.
  2. Security settings sidebarIn the user settings sidebar, click Security.

  3. Save recovery codes linkUnder Two-Factor Authentication, click Save your recovery codes.

  4. Save your recovery codes in a safe place. Your recovery codes can help you get back into your account if you lose access. If you generate new recovery codes or disable and re-enable 2FA, the recovery codes displayed on the "Save your two-factor recovery codes" page are automatically updated.
    • To save your recovery codes on your device, click Download.
    • To save a hard copy of your recovery codes, click Print.
    • List of recovery codes with option to download, print, or copy the codesTo copy your recovery codes for storage in a password manager, click Copy.
  5. Once you use a recovery code to regain access to your account, it cannot be reused. If you've used all 16 recovery codes, click Generate new recovery codes to recreate another batch of recovery codes.

Further reading