* Add back changes from prior to purge * Manually fix some invalid Liquid * Updoot render-content * Improve test messages to show correct output * Run el scripto * Pass the remaining test
7.7 KiB
title, intro, redirect_from, versions
| title | intro | redirect_from | versions | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Configuring two-factor authentication recovery methods | You can set up a variety of recovery methods to access your account if you lose your two-factor authentication credentials. |
|
|
In addition to securely storing your two-factor authentication recovery codes, we strongly recommend configuring one or more additional recovery methods.
Downloading your two-factor authentication recovery codes
{% data reusables.two_fa.about-recovery-codes %} You can also download your recovery codes at any point after enabling two-factor authentication.
To keep your account secure, don't share or distribute your recovery codes. We recommend saving them with a secure password manager, such as:
If you generate new recovery codes or disable and re-enable 2FA, the recovery codes in your security settings automatically update.
{% data reusables.user_settings.access_settings %}
{% data reusables.user_settings.security %}
{% data reusables.two_fa.show-recovery-codes %}
4. Save your recovery codes in a safe place. Your recovery codes can help you get back into your account if you lose access.
- To save your recovery codes on your device, click Download.
- To save a hard copy of your recovery codes, click Print.
- To copy your recovery codes for storage in a password manager, click Copy.

Generating a new set of recovery codes
Once you use a recovery code to regain access to your account, it cannot be reused. If you've used all 16 recovery codes, you can generate another list of codes. Generating a new set of recovery codes will invalidate any codes you previously generated.
{% data reusables.user_settings.access_settings %}
{% data reusables.user_settings.security %}
{% data reusables.two_fa.show-recovery-codes %}
3. To create another batch of recovery codes, click Generate new recovery codes.

Configuring a security key as an additional two-factor authentication method
You can set up a security key as a secondary two-factor authentication method, and use the security key to regain access to your account. For more information, see "Configuring two-factor authentication."
{% if currentVersion == "free-pro-team@latest" %}
Setting a fallback authentication number
You can provide a second number for a fallback device. If you lose access to both your primary device and your recovery codes, a backup SMS number can get you back in to your account.
You can use a fallback number regardless of whether you've configured authentication via text message or TOTP mobile application.
{% warning %}
Warning: Using a fallback number is a last resort. We recommend configuring additional recovery methods if you set a fallback authentication number.
- Bad actors may attack cell phone carriers, so SMS authentication is risky.
- SMS messages are only supported for certain countries outside the US; for the list, see "Countries where SMS authentication is supported".
{% endwarning %}
{% data reusables.user_settings.access_settings %}
{% data reusables.user_settings.security %}
3. Next to "Fallback SMS number", click Add.
4. Under "Fallback SMS number", click Add fallback SMS number.
5. Select your country code and type your mobile phone number, including the area code. When your information is correct, click Set fallback.

After setup, the backup device will receive a confirmation SMS.
Adding a fallback authentication method with Recover Accounts Elsewhere
You can generate an extra authentication credential for your account and store it with a partner recovery provider.
About Recover Accounts Elsewhere
With Recover Accounts Elsewhere, you can add an extra security factor to your {% data variables.product.product_name %} account in case you lose access to your two-factor authentication method or recovery codes.
Recover Accounts Elsewhere lets you associate your {% data variables.product.product_name %} account with your Facebook account. You can store an authentication credential in the form of an account recovery token for your {% data variables.product.product_name %} account with Facebook.
If you lose access to your {% data variables.product.product_name %} account because you no longer have access to your two-factor authentication method or recovery codes, you can retrieve your account recovery token from the recovery provider to help prove that you're the owner of your {% data variables.product.product_name %} account.
After you retrieve your token, {% data variables.contact.contact_support %} may be able to disable two-factor authentication for your account. Then, you can provide or reset your password to regain access to your account.
When you generate or retrieve an account recovery token, an event is added to your account's audit log. For more information, see "Reviewing your security log."
Generating and storing an account recovery token
You can generate an account recovery token and store it with a partner recovery provider.
- Sign in to your Facebook account, then return to {% data variables.product.product_name %}. {% data reusables.user_settings.access_settings %} {% data reusables.user_settings.security %}
- To generate a new token, under "Recovery tokens," click Store new token.

- Read the information about account recovery tokens, then click Connect with https://www.facebook.com.

- After you're redirected to Facebook, read the information about turning on account recovery with Facebook before you click Save as [YOUR NAME]. (If you save multiple tokens within a short period of time, Facebook may skip this confirmation step after you save your first token.)

{% endif %}