Recovery codes for 2FA?

[erlend_sh (Erlend Sogge Heggen) A fermé ce sujet ()]

2FA Backup codes

I’m looking into adding support for 2FA backup codes, this is what I came up so far and I’d really appreciate some feedback. This is very basic flow so far, but hopefully enough to raise some questions/points to consider. In order to enable backup codes, primary method (TOTP) has to be enabled. [Slice%201] After enabling backup codes, user gets to copy and store the codes. If user loses backup codes, they have to reset them and get the new set of codes. [Slice%204] Backup code can be used …