How to Use 2FA Backup Codes to Log In
No phone at hand? Log in to SolumeCore with a backup code. Learn how to use one, check how many you have left and generate a fresh set when they run low.
A 2FA backup code lets you log in when you can't get a code from your authenticator app, for example if you lost your phone. On the verification screen choose the option to use a backup code, type one of the codes you saved and click Verify and log in. Each code works only once.
What backup codes are
When you turn on two-step verification, SolumeCore gives you 10 backup codes. Each one is 12 letters and numbers written in three groups, like abcd-efgh-jkmn. You don't need to type the dashes, spaces or capital letters: the panel accepts the code either way.
They are shown only once, right after you turn 2FA on or generate a new set. We store them in a protected form, so we can't show them to you again. Saving them is up to you.
Treat backup codes like your password: anyone who has one can get past your second step. Never share them, never send them in a ticket or chat, and don't keep them in an unprotected note.
Log in with a backup code
- Go to dashboard.solumecore.com and enter your email and password.
- On the Enter your code screen, click Lost your phone? Use a backup code.
- Type one unused code in Backup code.
- Optionally tick Trust this device if it is your own computer.
- Click Verify and log in.
That code is now used up. After logging in we email you a notice saying how many codes you have left, which also helps you notice if someone else used one.
Check how many codes you have left
- Open Profile & security in the Account group of the menu and go to the Security tab.
- In the Two-step verification card, look at the Backup codes row. It shows something like "7 of 10 available".
- When only a few are left the row turns into a warning. Generate a new set before you run out.
Generate new backup codes
You can do this any time while 2FA is on, and you should after using several codes or if you suspect somebody saw them.
- In the Backup codes row, click Generate new ones (or Generate codes if you have none).
- Confirm it is you with your password, an app code or your passkey.
- Click Generate new ones again. The window Your backup codes shows the new set.
- Use Copy all or Download .txt, store them safely, tick I saved them somewhere safe and click Done.
Generating a new set invalidates every code from the previous one, even the ones you haven't used. Replace your saved copy right away. We send you a security notice every time it happens.
Where to keep your codes
- A password manager is the best option: it is encrypted and available on all your devices.
- A printed copy in a drawer or safe also works, as long as nobody else has access to it.
- Avoid screenshots, cloud notes without encryption and email drafts. If you downloaded the
.txtfile, move it to your password manager and delete it from the Downloads folder.
Troubleshooting
"Invalid or already used backup code"
- Check you are typing the code exactly, with letters and numbers only. The set contains no
0,o,1,lori, so if you read one of those, it is a different character. - It may be from an older set that was replaced, or you may have used it before.
- Repeated wrong attempts count together with wrong app codes. After 5 failures in 15 minutes the account is locked for 15 minutes by default, so wait and try again calmly.
I have no codes left and no phone
You can't generate new codes without logging in first. Follow what to do if you lose your 2FA device.
The option to use a backup code doesn't appear
It only shows up if you have at least one unused code. If you use a passkey as your second step and lost it, the screen can send a 6-digit code to your email instead.
FAQ
How many backup codes do I get?
Ten per set. Generating a new set replaces the previous one.
Do backup codes expire?
They don't expire with time. They stop working once used or when you generate a new set, and they are deleted if you turn 2FA off.
Can I use a backup code to confirm sensitive actions?
Yes. When the panel asks you to confirm it is you, for example to add a passkey or link another account, a backup code is accepted instead of the app code and it is used up as well.
Are backup codes the same as the 6-digit code from my app?
No. The app code changes every 30 seconds and can be reused while it is valid. A backup code is longer, doesn't change and works only once.
Related articles
- How to turn on two-factor authentication
- What to do if you lose your 2FA device
- How to set up passkey login
- How to manage sessions and devices
Looking for hosting you can manage safely from anywhere? Have a look at our plans.