Backup codes
Pre-generated single-use codes that let you log in if you lose access to your authenticator app. Critical safety net for 2FA-protected accounts.
Written by Shilder Recovery TeamReviewed by Shilder Editorial ReviewLast reviewed 2026-05-15
Backup codes are a list of single-use codes that work as a substitute for your authenticator app or SMS 2FA. Most platforms generate 5–10 codes during 2FA setup; each one can be used exactly once to bypass 2FA.
Why they matter
If you lose your phone, switch authenticator apps without exporting tokens, or wipe your device — backup codes are the difference between “log in normally” and “file a 2FA-reset appeal”.
How to use them
- At setup: Save the codes immediately. Don’t skip the step.
- Storage: Print them and store offline, or put them in a password manager. Don’t store them in the same place as your password.
- Single-use: Each code works once. After using a code, cross it off and (when most are used) generate a new set.
What to do if you lost them
If you’ve lost both your authenticator and your backup codes, recovery shifts to identity verification — see Instagram 2FA lockout.