Where should I keep two-factor authentication backup codes?
Quick answer
For Google Account backup codes, print them and keep the paper somewhere safe, such as with important documents. Identify the account on the copy so you can recognize it later, and do not share the codes. Each code works once; creating a replacement set makes the previous set inactive. These instructions are specific to Google, so check another service’s guidance before applying the same rules. [S1]
The question, the details, the next step.
A practical checklist
Print Google Account backup codes and keep the paper somewhere safe, such as with important documents. [S1]
Label the copy with an account identifier you will recognize.
Do not share the codes. [S1]
Treat each Google backup code as one-time use. [S1]
Update the stored copy after creating a replacement set; the previous Google set becomes inactive. [S1]
Check other services’ instructions instead of assuming Google’s rules apply.
A few more useful answers
Can I use this advice for backup codes from any service?
The cited instructions are for Google Account backup codes only. They do not establish the rules for other providers, so check the relevant service’s own guidance.
Can I use a Google backup code more than once?
No. Google says each backup code works once. [S1]
What happens to my old Google codes if I create a new set?
Google says creating a replacement set makes the previous set inactive, so update the stored copy and stop relying on the old one. [S1]
Sources
References used for this guide.
- [S1] Sign in with backup codes support.google.com · Checked
