Recovery codes
Use one of your ten single-use recovery codes when you lose your authenticator, and make a new set.
Avaloi gives you ten recovery codes when you set up an authenticator app. Each code signs you in once if you lose the app. Avaloi stores only hashes of them, so it cannot show them to you again.
Store them
Print them or save them in a password manager. Do not keep them only on the same phone as the authenticator app.
Use a code
- On the two-factor screen, choose Use a recovery code.
- Enter one unused code. Capitals, spaces, and the dash do not matter.
- Set up a new authenticator right away.
Make new codes
Open Account settings, then Security, then Recovery codes, then Make new codes, and enter your password. The old set stops working. Avaloi emails you.
If you use only email codes
Recovery codes come with the authenticator app. If you use only emailed codes, you have none, and losing your inbox needs a recovery request.
Lost the codes and the authenticator
File a recovery request from the sign-in page or email [email protected]. Support needs two of three proofs and does not complete recovery in chat: control of the verified inbox, a government photo ID through the recovery form, or company control (a DNS TXT record on a domain claimed for SSO, or another Owner confirming in the dashboard). On success Avaloi issues new codes or resets the password, ends all sessions, and emails you.
Limits
- Ten codes per set. Each works once.
- Wrong codes count toward the lock on the second step. Ten wrong codes in a row lock it for 15 minutes.
Related
Still stuck?
Email [email protected] with your site name and what you tried, or send us a message.