Recovery codes
The 10 one-time codes that get you back into your account if you lose access to your two-factor authenticator, how to save them, and how to regenerate them.
Recovery codes are a backup for two-factor authentication (2FA): 10 single-use codes you can enter instead of your authenticator app’s code, in case you lose your phone or switch devices without disabling 2FA first.
Where you get them
EmailFig generates a fresh set of 10 codes the moment you enable 2FA, on the Save your recovery codes screen. See Set up two-factor authentication. They’re shown once, with a Copy all button; there’s no way to view them again later, only to regenerate a new set.
Using one
Anywhere EmailFig asks for your 2FA code (the Two-factor check screen at sign-in, or the “Confirm it’s you” prompt before a sensitive change like disabling 2FA), you can enter a recovery code instead of your authenticator code. Each code works once.
Regenerating your codes
Go to Settings > Security, under Two-factor authentication. The Recovery codes section shows how many unused codes you have left and a Regenerate recovery codes button. Regenerating:
- confirms it’s you first (a sensitive change),
- replaces every existing code: the old ones stop working at once,
- shows the new 10 codes once, the same as during setup.
If you’ve used all 10, the page warns you that you have none left. Regenerate so you can still sign in if you lose your authenticator.
Related: Set up two-factor authentication, Turn off two-factor authentication.