Tool
What the Recovery Code Generator does
Recovery Code Generator: generates Recovery codes from How many codes. Example: how many codes 10 gives recovery codes rgrc3-ofsom khvdy-tuikl tipe5-rreej flhsk-kkpd6 fjuw6-gyneg a7epf-a17q4 imjpk-jnsbd gfniy-eheeq u41us-7pqmj 5a4rm-l9paf.
Feed it How many codes; it hands back Recovery codes. Set your values, then run the tool to see the result.
Typical users are anyone replacing a weak password. A secret that travels to a third-party server is no longer entirely a secret.
Generated secrets never touch the network. They are produced in your browser and stay there.
Below the tool you will find the field reference, the method, and an example computed from the values it opens with.
What do the Recovery Code Generator fields mean?
The Recovery Code Generator uses 1 input. Sensible defaults are loaded up front, which means you can change one number at a time instead of filling the whole form first.
| Field | What to enter | Default |
|---|---|---|
| How many codes | accepts 1 to 20 | 10 |
How does the Recovery Code Generator work?
Each output is derived from the inputs above in a single pass; there is no hidden state carried between runs, so the same inputs always give the same generated output.
Each field is verified before use; failures are reported explicitly rather than swallowed.
Worked example
These are the values the Recovery Code Generator loads by default, and the result it produces from them. These are the exact values loaded when the page opens, and the answer they produce.
| How many codes | 10 |
|---|
| Recovery codes | rgrc3-ofsom khvdy-tuikl tipe5-rreej flhsk-kkpd6 fjuw6-gyneg a7epf-a17q4 imjpk-jnsbd gfniy-eheeq u41us-7pqmj 5a4rm-l9paf |
|---|
Backup codes are a deliberate exception to "never reuse a credential"
These codes exist for exactly one scenario: your normal second factor (an authenticator app, a hardware key) is unavailable, and you need a way back into the account without it.
Worth knowing
- Each code should be single-use. The account system should invalidate a code the moment it is redeemed, precisely so a code seen once (over someone’s shoulder, in a compromised email) cannot be reused later.
- Store generated codes offline (printed, or in a password manager’s secure notes) rather than in an easily searchable plaintext file. They are a complete authentication bypass for anyone who finds them.
- Using one of these codes is worth treating as a signal to regenerate the entire batch immediately: if one code was exposed in a given context, the others likely were too.
- Recovery codes are a fallback, not a replacement for a second factor. An authenticator app or hardware key should remain the primary method; codes exist for the day that primary method is lost or unavailable.
How to use it
- Type How many codes (1 to 20).
- Press Generate codes.
- Look at Recovery codes in the output panel.
- Print gives a tidy version without the navigation, which is handy for attaching to a file.
What this tool does not do
- Anything generated here is only as safe as wherever you store it afterwards.
- Randomness comes from your browser cryptographic source, which is suitable for real secrets.
- It will not warn you that a different tool would suit your question better.
- Nothing here can catch a correct number entered in the wrong field.
Frequently asked questions
Only How many codes. Nothing starts empty, so you can change one value at a time and watch how the result responds.
How many codes accepts 1 to 20. Anything beyond those bounds is flagged rather than approximated.
With the values loaded when the page opens, recovery codes comes out as rgrc3-ofsom khvdy-tuikl tipe5-rreej flhsk-kkpd6 fjuw6-gyneg a7epf-a17q4 imjpk-jnsbd gfniy-eheeq u41us-7pqmj 5a4rm-l9paf. Overwrite any of the starting values and the result follows.
No. Nothing is transmitted or logged, which is the only acceptable design for a tool that handles credentials.
No payment and no login. Advertising covers the running costs.
It is accurate to the method shown. Rounding only affects what is displayed, never what is computed.