Recovery codes
Recovery codes let you sign in when your authenticator app isn’t available. You get 10 of them when you turn on two-step verification, and each one works only once.
What they look like
Each code has the form XXXX-XXXX-XX, using capital letters and numbers. Letters and digits that are easy to confuse (0, O, 1 and I) are never used.
Where to find them
Syntic shows your codes once, straight after you verify your authenticator. You can Download .txt (a file named syntic-recovery-codes- plus the date) or Copy all. After you choose I’ve saved them, they can’t be shown again.
In Settings → Security, the Recovery codes card shows how many unused codes you have left and when they were made.
Sign in with a recovery code
Start signing in as usual
Use Google or your email code.
Pick Recovery code
On the verification screen, choose Recovery code (or Try another method first).
Enter one code
Type one code and choose Continue.
Cross that code off your list: it won’t work again. A wrong or already-used code gives “Invalid or already-used recovery code.” After 5 failed tries in 15 minutes, you’ll need to wait or use another method: “Too many attempts. Try another method or wait 15 minutes.”
A recovery code unlocks only the browser you used it in. Your other devices still ask for their own check.
Get new codes
Make a fresh set if you’ve used several, or if you think someone else has seen them.
- In Settings → Security, on the Recovery codes card, choose to regenerate.
- The Regenerate recovery codes? dialog warns that your current codes stop working straight away, including saved or printed copies.
- Enter a code from your authenticator app to confirm it’s you, then choose Regenerate codes.
- Save the 10 new codes. You’ll see “New recovery codes generated. Your old codes no longer work.”
If you have no unused codes left, the card offers Generate instead.
Removing your last authenticator app cancels all your unused recovery codes at the same moment.