Skip to content

Use and replace recovery codes

Recovery codes let you sign in when you cannot use your authenticator app. Each code works once and protects one Exposure account.

Exposure shows ten recovery codes after you set up two-factor authentication. Copy or download them and store them in a safe place, such as your password manager. Keep a copy you can reach if you lose your phone.

The codes are shown only when they are created. You cannot open the same set again later. Do not send recovery codes to anyone, including support.

  1. Sign in with your username or email and password.
  2. Paste one unused recovery code into Authenticator or recovery code.
  3. Select Verify and sign in.

Authenticator or recovery code field and Verify and sign in button.

Mark that code as used in your saved copy. You can also use an unused recovery code when a security change asks for an authenticator code. You must still enter your current password when asked.

  1. Open Settings → Security & Signin for the correct account.

  2. Under Recovery codes, check how many codes remain.

  3. Select Create new codes.

    Recovery codes card showing the remaining count and Create new codes button.

  4. Enter your current password and an authenticator or unused recovery code.

  5. Select Replace recovery codes.

  6. Use Copy codes or Download codes to save the new set, then select I saved my codes.

The new set replaces all old recovery codes, including unused ones. Other sessions for this account end. Your authenticator remains active.

Create a new set before you run out of codes. If you have no codes left and cannot use your authenticator, see Fix two-factor sign-in problems.


Use the Exposure contact form.