Skip to main content

Recovery Codes & Backup Keys

When setting up two-factor authentication, most services provide one-time recovery codes. These are the "break glass" option if the authenticator app and security keys are both unavailable.

Where Recovery Codes Are Stored

[e.g., "Printed and stored in the fireproof safe," "Saved as a secure note in the password manager," "In a text file on the encrypted USB drive in the safe"]

Recovery Codes by Service

ServiceRecovery Codes LocationNotes
Google[Location]
Apple ID[Location][Recovery key? Trusted phone number?]
Microsoft[Location]
Password Manager[Location][Most critical one]
[Other critical service][Location]

Encrypted USB / Backup Drive

[If you keep recovery codes or sensitive files on an encrypted USB drive, where is it and what's the decryption password?]

Location[Where the USB drive is]
Encryption Method[e.g., BitLocker, VeraCrypt]
Password[Where to find it]