Regenerate my recovery codes

Replace your recovery codes with a new set of ten, for example because you lost the old ones or used some of them.

Who can do it

Any person who signs in, for their own account. No role or permission is needed.

The console offers no Recovery codes section when:

• you are acting in a tenant under support access: the Security item is absent from the account menu;
• your session came from your organization's identity provider and the platform holds no credential for you.

Before you start

• Have somewhere safe to store the new codes, away from the device that holds your passkey. The platform keeps no readable copy: the codes are shown once.
• The new set replaces the whole old set. Every earlier code, used or not, stops working at once.

Steps

1. Open the account menu in the header and select Security.
2. Under Recovery codes, select Generate new recovery codes.
3. In Replace your recovery codes?, select Generate new codes.
4. If Confirm your identity to continue opens, confirm with your own sign-in steps.
5. The console shows Save your recovery codes. Copy them with Copy codes or write them down, and store them safely.
6. Select I have saved these codes somewhere safe, then Done. The codes leave the page and cannot be shown again.

What you see when it worked

Ten new codes are shown once. Each code works once: if you lose every passkey and authenticator app, a recovery code lets you sign in once to add a new one, and every other session of yours then ends. The regeneration is listed under Recent security activity.

If it fails

The confirmation stays open with the reason, and the old codes keep working.

Without the console

Related

• Security: what the screen shows and every decision you make on it.