The recovery codes are a good backup solution for 2FA. We use the `recovery_codes` plugin from rodauth for this purpose. We don't use recovery codes as the primary 2FA method. Recovery codes are auto-generated upon enabling the first 2FA method and auto-removed after disabling the last 2FA method. Additionally, we redirect users to the recovery code view once a 2FA method is activated, enabling them to save their recovery codes.
985 B
985 B