Backup codes

Backup codes are your safety net for multi-factor sign-in. When you enrol an authenticator app, DASH gives you eight single-use codes. If your phone is lost, broken or simply not to hand, a backup code gets you in. This page covers using, regenerating and recovering with them.

Before you start

Backup codes are issued when you set up an authenticator app — see Authenticator app (TOTP). If you never saved them, you can generate a fresh set from Security Settings (see below).

Sign in with a backup code

1. At the MFA challenge during sign-in, choose Use a backup code instead of entering an authenticator code.
2. Enter one of your saved codes. Codes are case-insensitive and work with or without the hyphen.
3. On success, DASH signs you in and tells you how many backup codes remain.

Choosing to use a backup code at the MFA challenge

Each code works only once

A backup code is consumed the moment you use it and cannot be used again. When your remaining count runs low, DASH shows an in-app banner advising you to regenerate — don’t ignore it, or you may be left without a way in if you lose your authenticator.

Regenerate your backup codes

You can replace your codes with a fresh set of eight at any time — for example after using several, or if you think the old set may have been seen.

1. Open your user profile from Users in the sidebar and go to Security Settings.
2. Choose to regenerate backup codes. You will be asked for a current authenticator code to confirm it is really you.
3. DASH replaces all unused codes with a new set of eight. Save them straight away — like the originals, they are shown only once.

If you enrolled before backup codes existed and have none, Security Settings shows a Generate backup codes prompt instead — take it, so you have a recovery route.

Recovering when you have lost your authenticator

• You still have backup codes: use one to sign in (above), then go to Security Settings, remove the old authenticator and enrol your new device. See Authenticator app (TOTP).
• You have a passkey: sign in with it instead — no authenticator code is needed. See Passkeys.
• You have neither: you cannot sign yourself in. Contact an Admin or Account Owner on your account for help. See Account locked.

Related

• Authenticator app (TOTP)
• Passkeys
• Logging in
• Account locked