Recovery codes

-

Ten codes, each works once. If you lose every device with a passkey, a code lets you add a new passkey - nothing else. Using a code signs out every session of your account and notifies your other devices.

We keep only a one-way hash of each code (scrypt). We cannot show them again: you see them once, right after you make them.

Make 10 new codes

Making new codes asks for your passkey and voids every code made before.

Your new codes

Download .txt

Keep them offline: on paper or in a password manager, not in the same place as your phone. Anyone who has a code can add a passkey to your account (you would get a notification). In a team, a code alone gives nobody your role: the other members still have to replace your key in the team policy.