1time icon indicating copy to clipboard operation
1time copied to clipboard
verified publisher icon atlassian

Recovery Codes

Open sench93 opened this issue 1 year ago • 1 comments

How can i create recovery codes for clients to use them in case of they lose access to their authenticators.

sench93 avatar Jan 29 '25 11:01 sench93

@sench93 recovery codes are not part of the RFCs that define TOTP and HOTP.

Recovery codes are temporary passwords that expire once used. Such recovery codes that your system generates should be random and have high entropy.

For example, you can use AWS KMS random generator to create a recovery code of 32 alphanumeric characters and use that as the recovery code.

diegoocampoh avatar Feb 27 '25 21:02 diegoocampoh