Coding Friend LLC

← All Never Lose Codes guides

Lost your authenticator codes? What to do now

Don't panic, and don't start resetting things yet. Work through these steps in order. Most people get back in at step 1, 2 or 3.

One thing to know up front: we can't recover codes for anyone. Never Lose Codes never sends your codes to us, so we have no copy. If you used Never Lose Codes, your backup files and recovery key are the way back, and step 2 covers them.

Before you do anything: three things not to do

  • Don't uninstall or reset the app that held your codes, even if it looks broken. Removing it can delete the very data you're trying to get back.
  • Don't clear your browser's data to "fix" a browser extension. That's one of the most common ways codes disappear.
  • Don't turn off 2FA on accounts you can still reach in a hurry. Get back in first, then set it up again properly.

Codes appear, but sites reject them?

That's a different problem, and usually an easy one. Time-based codes depend on your device's clock. If the clock is off by more than about 30 seconds, every code will be wrong. Set your computer or phone to set the time automatically, wait for the next code, and try again. If only one account's code is wrong, that account was likely set up again on the site, and the old secret no longer matches.

Step 1: Check every device you've used

An old phone in a drawer, a tablet, a second computer or another browser profile may still have a working copy. If you moved accounts between apps, the original app usually kept its copy. Moving out of Google Authenticator, for example, doesn't remove anything from it.

Step 2: Look for a backup

  • Never Lose Codes users: look in your Downloads folder for a folder named NeverLoseCodes. Install the extension (on any computer), choose I have a backup file on the setup screen, pick the newest file, and enter your recovery key. If the extension is still installed but asks for a recovery key, Chrome's stored key was cleared; type your recovery key on that screen.
  • Other apps: check that app's own export or cloud backup feature, and the account it was signed into.
  • Check your files for anything saved when you set up 2FA: screenshots of setup QR codes, printed codes, or text files with setup keys.

Step 3: Use each site's recovery codes

Most sites gave you one-time recovery or backup codes when you turned on 2FA, and asked you to save them. Search your password manager, documents, email and printed papers for words like "backup codes" or "recovery codes". Each code works once, in place of an authenticator code. Google's backup codes page shows how Google's work.

Once you're in, go straight to the site's security settings, set up 2FA again with a new authenticator, and save the new recovery codes it gives you.

Step 4: Try the site's other sign-in options

Many sites let you confirm it's you another way: a text message, a security key, a prompt on a phone you're already signed in on, or a backup email. Look for a link like "Try another way" or "Use a different method" on the code screen.

Step 5: Use the site's account recovery

If nothing else works, each site has its own recovery process. Expect questions, waiting periods, and sometimes proof of identity. Start with the accounts that matter most: email first (it resets everything else), then banking, then work.

Use the same device, location and network you normally sign in from. Sites often trust a familiar setup more.

Once you're back in: make it the last time

  1. Set up 2FA again on each account with an authenticator that keeps a backup you control.
  2. Save each site's new recovery codes somewhere other than your authenticator.
  3. Keep the same accounts on two devices if you can.
  4. Test your backup by actually restoring it. How to back up your 2FA codes shows how.

Never Lose Codes is a Chrome extension that keeps your 2FA codes encrypted on your computer, with backup files you hold and a recovery key. See how it works.