How to Back Up and Recover Your Two-Factor Authentication Codes
Two-factor authentication is essential, but it creates a new risk: if you lose the device that holds your codes, you can be locked out. A little preparation makes recovery painless.
Save recovery codes when you enable 2FA
Most services show a set of one-time recovery codes during setup. Store them in your password manager or print them and keep them somewhere safe at home. Each code works once.
Choose an authenticator with backup or export
- Some authenticator apps offer encrypted cloud backup.
- Others let you transfer accounts directly to a new phone.
- Check the process before you need it.
Register more than one method
Add a backup method wherever possible, such as a second authenticator device, a hardware key or a trusted phone number. Keep your account recovery email and phone number current.
Switching to a new phone
- Do not wipe the old phone first.
- Transfer or restore your authenticator accounts to the new phone.
- Test sign-in to important accounts.
- Only then reset the old device.
If you are already locked out
Use a recovery code, a backup method or the service account recovery process. This can take days and requires identity checks, which is why backups matter.
Key takeaway: Save recovery codes and add a backup method for every important account before you need them.
