Recovery codes are the backstop for when your phone is lost, flat or somewhere else. You were given ten when you set up two-factor, and each one signs you in once in place of your second step.

Who can do this

Anyone with an unused recovery code from their latest set.

Before you start

Find your codes — the bizomate-recovery-codes.txt file you downloaded, or wherever you copied them.

Steps

  1. Sign in with your email and password as usual.
  2. On the second-step page, select Use a recovery code under the form. Use a recovery code opens.
  3. In Recovery code, type one of your codes — they look like ABCDE-12345.
  4. Select Sign in. The button reads Checking while it works.

Bizomate signs you in.

What happens next

  • That code is used up. It will not work again. Settings > Two-factor shows how many are left — 9 of 10 left.
  • With three or fewer left, the Two-factor page warns you and marks the codes Running low. Make a new set before you run out. See Make a new set of recovery codes.
  • If you used a code because you lost a device, remove that device's passkey or authenticator from Settings > Two-factor, then add a new one. See Manage your two-factor methods.

Good to know

  • Capitals, spaces and the hyphen do not matter. abcde12345 works as well as ABCDE-12345.
  • Only your latest set works. Making a new set cancels every code in the old one, including any you wrote down.
  • Wrong codes count towards the pause. Five failed attempts pause sign-in for 15 minutes.
  • We cannot read your codes back to you. They are stored hashed, like passwords.
  • The links under the form take you back: Try your authenticator app again and Use your passkey instead appear if your account has them.

If something goes wrong

What you see Why What to do
That code is not valid, or it has already been used. Try another one. The code was mistyped, already used, or from an older set. Try another code from your latest set.
Enter a recovery code. The field was empty. Type a code.
You have no codes left, and no passkey or authenticator — Select Lost access to everything?. See If you have lost access to your two-factor.
Sign-in is paused on this account Five attempts failed. Wait 15 minutes, or reset your password.