- When you finish two-factor setup you get 10 recovery codes such as
K7QD-M2XP. They are shown once; Postalu stores only a scrambled form. - Each code works once. Using one signs you in; it is then spent.
- Keep them in a password manager or print them and store them safely. Do not keep them in the same place as your phone's authenticator only.
1. Use one
On the code screen press Use recovery code, type it, and sign in. Recovery codes work at sign-in only: disconnecting an account, changing your password and regenerating codes ask for a code from your authenticator app.
2. Make new ones
- Open Settings → Security & Connections → Recovery Codes.
- Enter your current password and a 6-digit code and press Regenerate Recovery Codes.
- Save the new list. All earlier codes stop working immediately.
If a wrong code is entered many times you are temporarily locked out. Wrong guesses are limited to 5 per 15 minutes.
Read next
- Two-factor sign-in Why every account uses an authenticator app, how to set it up, and what to do if you lose your phone.
- Passwords: rules, changing and resetting What makes an acceptable password, how to change it, and how to reset a forgotten one.
