🧾
Backup Codes
Authentication
Pre-generated one-time recovery codes used when primary MFA methods are unavailable; treat as high-value secrets.
Definition
Backup codes typically bypass the usual MFA step. They should be stored securely (offline or encrypted) and regenerated after use or suspected exposure.
In plain English
Pre-generated one-time recovery codes used when primary MFA methods are unavailable; treat as high-value secrets.
Why this matters
Why it matters: They reduce lockout risk but increase takeover risk if stored insecurely.
Example
Example: Store in a password manager or offline; regenerate after any suspected compromise.