2FA Backup Code Manager

A 2FA backup code manager is a secure vault for storing the one-time recovery codes provided by services when you enable two-factor authentication (2FA). These codes let you access your account if you lose your phone, authenticator app, or hardware security key.

Before any data is saved to localStorage, it is encrypted with AES-256-GCM using the Web Crypto API. Your master password is combined with a random salt and run through 600,000 iterations of PBKDF2 to derive the encryption key. This means even if someone accesses your browser storage, they cannot read your backup codes without your master password.

Never store backup codes in plain text, in cloud documents, or in unencrypted notes. Always use a dedicated, encrypted tool like this one. Print a physical copy and store it in a safe place as a secondary backup. When you use a backup code, mark it as used immediately so you know exactly how many codes remain.

This tool is designed so that your master password cannot be recovered. There is no password reset, no "forgot password" email, and no backdoor. If you lose your master password, all your stored backup codes become permanently inaccessible. Store your master password in a password manager or write it down and keep it in a secure location.