Generate and store recovery codes

Recovery codes are your emergency exit if you lose every passkey and your phone. Generate them at your first sign-in and keep them away from the computer.

How do I generate the codes?

1. Open «Protect» › «Trusted devices» and choose «Recovery codes».
2. In the «New codes» window, choose «Prepare new set». If «Current password» appears, fill it in.
3. Eight single-use codes appear. Use «Copy all» or «Save recovery file».
4. Keep them away from this device: in a password manager or on paper, somewhere safe. Never email them.
5. Tick «I have saved all the codes outside this screen.» and choose «Activate saved set» before the activation time runs out.
6. The console shows «New set active. The previous codes were revoked atomically.»

What if I close the window before activating?

The previous set stays valid. The console explains: «Store the eight codes in a safe place. Until you activate them, the previous set remains valid.» If the connection dropped after you sent the activation, keep the file: the new set may already be active.

When should I generate a new set?

• After you use a code.
• If you suspect someone saw the codes.
• After an authenticator reset (every code is revoked).

Each code works once, and a new set revokes the previous ones.

Is the recovery file safe?

The file holds the codes in plain text. The console warns: «The file contains secrets in plain text. Store it offline or in a protected vault. Do not send it by email.»

The console asks me to sign in again

If your account uses a Presence authenticator, the console may ask «Sign in again with Presence before preparing the codes. The password alone does not authorize this operation.»