Backup Codes

Backup codes are single-use recovery codes that allow users to bypass the 2FA requirement in emergencies. This feature is essential for preventing permanent account lockouts while maintaining a high security standard.

Enable Backup Codes and Roles

This is the master switch for the recovery code system.

• Function: Toggle to Enable to allow the generation and use of backup recovery codes across your site.
• User Experience: Once enabled, permitted users can generate a set of codes from their individual profile page under the Two-Factor Authentication section.
• Selection: Use the Select roles dropdown to choose which user tiers (e.g., Administrator, Editor) can generate backup codes.
• Management: Use the Select All or Remove All buttons for rapid configuration across all site roles.

Backup Code Statistics

This dashboard provides a real-time overview of how recovery codes are being utilized on your site.

• Users with Codes: The total number of users who have generated at least one set of backup codes.
• Low on Codes: Identifies users who have nearly exhausted their supply of single-use codes and may need to generate new ones.
• Used Today / This Month: Tracks the frequency of recovery code usage to help you identify periods of high recovery activity.

Users with Backup Codes

This section provides a list of specific users who currently have active recovery codes.

• Management: If no users have generated codes yet, this area will remain empty.
• Refresh: Click the Refresh button to update the list with the most recent user data.

Every time a backup code is used, the event is logged in the 2FA Audit Logs with a precise timestamp, IP address, and user information for security auditing.

After adjusting your settings, ensure you click Save Changes in the top-right corner to apply the new configuration.