Recovery codes

Recovery codes sign you in when you can't use your authenticator app. You get 10 codes when you turn on two-step verification, and each code works once.

A code looks like abcd-efgh-ijkl: twelve characters in three groups of four. Capital letters and missing hyphens are accepted, so you can enter a code the way you wrote it down.

Store the codes somewhere other than the device that holds your authenticator app. This is the only time the codes are shown.

Use a recovery code

To sign in with a recovery code, follow these steps:

1. Sign in with your email address and password.
2. On the Two-step verification page, click Use a recovery code instead.
3. In the Recovery code field, enter one of your saved codes.
4. Click Verify.

The code is used up. The Security page shows how many codes are unused.

Regenerate your codes

Regenerate your codes when you're running out of them, or when you think someone else has seen them.

To regenerate them, follow these steps:

1. Go to Security.
2. Next to Recovery codes, click Regenerate.
3. Enter your current password.
4. Click Regenerate.

You get 10 new codes, and every code from before stops working.

Recovery codes belong to an authenticator app. If you haven't set one up, there's nothing to regenerate.