web60

How to use and regenerate 2FA recovery codes

Security3 min read·

When you set up two-factor authentication (2FA) on your Web60 account, you receive a set of 8 recovery codes. These codes are your safety net — if you ever lose your phone or cannot access your authenticator app, you can use a recovery code to sign in instead.

What are recovery codes?

Recovery codes are one-time-use backup codes. Each code is a short string of letters and numbers. When you sign in and are asked for your authenticator code, you can enter a recovery code instead.

Each code can only be used once. After you use a code, it is permanently used up.

When to use them

Use a recovery code when:

  • Your phone is lost, broken, or stolen
  • You deleted your authenticator app by mistake
  • Your authenticator app is not generating the correct codes
  • You got a new phone and have not set up your authenticator app yet

How to store them safely

When you first see your recovery codes, save them immediately. Here are the best ways to keep them safe:

  • Print them out and keep the paper in a safe place
  • Save them in a password manager (like 1Password or Bitwarden)
  • Write them down and store the note somewhere secure

Do not store your recovery codes on the same phone as your authenticator app. If you lose your phone, you would lose both.

How to regenerate recovery codes

If you have used some of your codes, or you think someone else may have seen them, you can generate a fresh set at any time.

  1. Sign in to your Web60 dashboard.
  2. Click "Account" in the left-hand sidebar.
  3. Scroll down to the Two-Factor Authentication section.
  4. Click "Regenerate Recovery Codes".

The Regenerate Recovery Codes button on the Account page

  1. Confirm that you want to generate new codes. This will invalidate all your old codes — they will stop working immediately.

The confirmation dialog for regenerating codes

  1. Save your new codes. You can click "Copy All" to copy them to your clipboard, then paste them somewhere safe.

The new recovery codes with the Copy All button

Your old codes are now invalid. Only the new codes will work.

Need help?

If you have lost both your phone and your recovery codes and cannot sign in, visit our support page and we will help you regain access to your account.

Frequently asked questions

How many recovery codes do I get?

You get 8 recovery codes each time. Each code can only be used once.

Can I use a recovery code more than once?

No. Each recovery code is single-use. Once you have used a code to sign in, it is permanently used up.

What if I have used all my recovery codes?

Sign in to your dashboard and regenerate a new set of codes from the Account page. If you cannot sign in at all, contact Web60 support.

Does regenerating codes turn off 2FA?

No. Regenerating codes only replaces your old codes with new ones. Two-factor authentication stays enabled and your authenticator app continues to work normally.

Last updated: 3 April 2026

Still need help?

Contact our support team for personalised assistance.

Contact Support