What are backup codes?
Backup codes are a recovery method for multi-factor authentication (MFA). They let you sign in if you no longer have access to your usual MFA method, for example if you lose your phone or can't reach your authenticator app.
What you'll need
MFA already set up on your account (via an authenticator app or SMS)
Generating your backup codes
Go to your account settings. Click your name in the bottom left corner, then open Password & Authentication under Personal settings. You'll see all your sign-in methods listed here, including Backup codes.
Click "Set up" next to Backup codes. A dialog explains that these are one-time codes you can use to sign in if your other methods become unavailable. Click "Generate codes" to continue.
You'll be shown a set of 12 unique backup codes, displayed in a grid with Copy and Download options. Confirm you've saved them by checking "I've saved my backup codes", then select Done.
Note: for your security, this is the only time your codes are shown in full — they can't be viewed again afterwards, so make sure to copy, download, or write them down before closing this screen.
Storing your codes safely
Store your backup codes somewhere secure, such as a password manager.
Don't share them with anyone.
Avoid storing them in an easily accessible screenshot or unprotected note.
Using a backup code to sign in
On the login screen, select "Can't sign in?"
Enter one unused backup code to access your account.
Once you're signed in, set up a new MFA method (if needed) and generate a fresh set of backup codes.
Managing your backup codes
Your backup codes are listed under Settings → Password & Authentication. For security, the codes are encrypted and can't be viewed in plain text after they're generated, so make sure you've saved them somewhere safe when they're first shown to you.
Keep in mind:
Backup codes are different from the regular 6-digit codes sent by your authenticator app or SMS. They're meant for emergency recovery, not everyday sign-in, and they don't change automatically.
Generating a new set of codes invalidates all previous codes, including any you haven't used yet. Only your most recently generated set will work.