Backup Codes for MFA

Backup codes are your safety net for multi-factor authentication. They let you access your account when you can't use your primary MFA method.

What Are Backup Codes?

Backup codes are:

• One-time use recovery codes
• Generated when you enable MFA
• Valid until used or regenerated
• Your last resort for account access

Generating Backup Codes

Your set of 10 backup codes is shown once, automatically, when you turn on MFA. Save them right away. For security, Zenovay can't show you the same codes again later. If you didn't save them, generate a fresh set with Regenerate codes (see below).

1. 1

   Save them during MFA setup

   When you enable MFA, the codes appear on screen after you confirm your authenticator. Download to save as a text file, or Copy all of them, then store them somewhere safe.

2. 2

   Acknowledge and continue

   Tick the confirmation box to confirm you've saved the codes, then click Done. The codes won't be displayed again.

Understanding Your Codes

You receive 10 backup codes that look like:

a3f7-k9m2-b5x4
h6t8-w4p2-n7r3
e5m9-c2k6-x8a4
...

Code Properties

Property	Value
Total codes	10
Format	12 characters, shown as three groups separated by dashes
Case sensitivity	Not case sensitive
Uses per code	One time only
Expiration	Never (until regenerated)

Using a Backup Code

When you can't use your normal MFA:

1. 1

   Start Login

   Enter your email and password as usual.

2. 2

   Select Backup Code

   On the MFA prompt, click Use a backup code or Can't access your authenticator?

3. 3

   Enter Code

   Type one of your backup codes (with or without dashes).

4. 4

   Log In

   You'll be logged into your account.

5. 5

   Restore MFA Access

   Immediately set up a new MFA method or recover your existing one.

Storing Backup Codes Safely

Recommended Storage Methods

Password Manager (Most Recommended)

• Store in 1Password, Bitwarden, or similar
• Encrypted and accessible
• Separate from your Zenovay password entry

Encrypted File

• Create an encrypted ZIP or use VeraCrypt
• Store on multiple devices
• Remember the encryption password

Physical Storage

• Print and store in a safe
• Write in a secure location
• Consider safety deposit box for extra security

Multiple Locations

• Keep copies in 2-3 secure places
• Don't store all copies together
• Update all copies when regenerating

What NOT to Do

• Don't store in plain text on your computer
• Don't email codes to yourself
• Don't save in cloud storage unencrypted
• Don't share with anyone
• Don't store with your password

Regenerating Backup Codes

Regenerate codes if:

• You've used most of your codes
• You suspect they may be compromised
• You want fresh codes as a precaution

1. 1

   Go to Security settings

   Go to Settings → Account → Security & access.

2. 2

   Click Regenerate codes

   In the MFA section, click Regenerate codes.

3. 3

   Verify with your authenticator

   Enter the current 6-digit code from your authenticator app to confirm.

4. 4

   Save New Codes

   Download or copy your new codes immediately.

5. 5

   Update Storage

   Replace old codes in all storage locations.

Keeping Track of Your Codes

Zenovay doesn't show a running count of unused codes in your settings, so keep track yourself. Each code works exactly once, so it's worth noting which ones you've used wherever you store them.

If you've worked through most of your set, regenerate a fresh batch of 10 so you always have spares on hand.

When You're Running Low

If you've used most of your codes:

1. Go to Settings → Account → Security & access and regenerate a fresh set
2. Update all your stored copies
3. Make sure your authenticator app is working so you don't have to rely on backup codes

Emergency Situations

Lost All Backup Codes and MFA

If you've lost everything:

1. Contact support at [email protected]
2. Be prepared for identity verification
3. Recovery may take several days

Backup Codes Not Working

If a code doesn't work:

• Check you're entering the full code
• Try without dashes
• Ensure it hasn't been used before
• Try a different code
• Contact support if all codes fail

Best Practices

Regular Maintenance

• Note which codes you've used so you know when you're running low
• Verify your saved codes are still accessible at least once a year
• Regenerate if any storage location was compromised

Security Measures

• Never share codes with anyone, including "support"
• Zenovay will never ask for your backup codes
• Treat as sensitive as your password
• Destroy printed codes securely when regenerating

Organization

• Label clearly (but discreetly) what the codes are for
• Include the date generated
• Note how many should remain unused

Backup Codes vs Other Recovery

Method	When to Use	Security
Backup Codes	Lost MFA device	High (if stored securely)
Account Recovery	All MFA lost	Medium (requires verification)
Support Contact	Last resort	Low (time-consuming)

FAQ

How many codes should I keep unused?

Try to keep at least a few codes unused at all times. Once you've worked through most of your set, regenerate a fresh batch of 10.

Can I get more than 10 codes?

No, each generation provides exactly 10 codes. Regenerate for a fresh set of 10.

Do codes expire?

Codes never expire unless you regenerate them. However, regenerating invalidates all existing codes.

Can I use the same code twice?

No, each code works exactly once. Attempted reuse will fail.

What if someone finds my codes?

They could bypass your MFA. Regenerate immediately and update your password.

Next Steps

• Set up additional MFA methods
• Review account recovery options
• Security best practices