After successfully setting up two-factor authentication via a TOTP mobile application , the Two-factor recovery codes (https://[hostname]/settings/auth/recovery-codes) page lists your valid recovery codes.

Treat your recovery codes with the same level of attention as you would your password! They should not be shared or distributed. We recommend saving them with a password manager such as LastPass, 1Password, or Keeper.

  1. In the upper-right corner of any page, click your profile photo, then click Settings. Settings icon in the user bar
  2. In the user settings sidebar, click Security. Security settings sidebar

  3. Under Two-Factor Authentication, click Save your recovery codes. Save recovery codes link

  4. Save your recovery codes by clicking Download, Print, or Copy. Your recovery codes will help get you back into your account if you've lost access. If you generate new recovery codes or disable and re-enable 2FA, the recovery codes displayed on the "Save your two-factor recovery codes" page are automatically updated. download-print-or-copy-recovery-codes

  5. Once you use a recovery code to regain access to your account, it cannot be reused. If you've used all 16 recovery codes, click Generate new recovery codes to recreate another batch of recovery codes.

Further reading