Recovery codes

Recovery codes sign you in when you can't use your authenticator app. You get 10 codes when you turn on two-step verification, and each code works once.

A code looks like abcd-efgh-ijkl: twelve characters in three groups of four. Codes are case-insensitive, and hyphens are optional.

The codes are shown only once, when they're created. Store them somewhere other than the device that holds your authenticator app.

Use a recovery code

To sign in with a recovery code, follow these steps:

1. Sign in with your email address and password.
2. On the Two-step verification page, click Use a recovery code instead.
3. In the Recovery code field, enter one of your saved codes.
4. Click Verify.

The Security page shows how many codes are unused.

Regenerate your codes

Regenerate your codes when you're running out of them, or when you think someone else has seen them.

To regenerate them, follow these steps:

1. Go to Security.
2. Next to Recovery codes, click Regenerate.
3. Enter your current password.
4. Click Regenerate.

You get 10 new codes, and every earlier code is invalidated.