Store two-factor recovery codes

Store two-factor recovery codes is easier to verify when you use one controlled item and confirm the account, workspace, source, and destination at each step. This guide follows the current Dosya workflow and identifies the result you should see.

Before you start

• Open Account settings > Security > Two-factor authentication in the current released client.
• Confirm the active account and workspace, then identify new recovery-code set.
• Use a small non-confidential test item and record its current state before changing it.
• Keep passwords, API keys, recovery codes, private links, personal data, and confidential file contents out of screenshots and support messages.

Steps: store two-factor recovery codes

1. Open Account settings > Security > Two-factor authentication and confirm the active account and workspace.
2. Locate new recovery-code set and verify its name or identifying details.
3. Save the codes in a protected offline or password-manager location and mark that copy with the account identity.
4. Read the displayed warning, permission, progress, or confirmation state before leaving the screen.
5. Confirm that a recovery code remains available if the authenticator device is lost.
6. Refresh, fetch, or reopen the relevant view once to verify the result persisted.

Expected result

The controlled workflow completes and a recovery code remains available if the authenticator device is lost. The result remains visible after a refresh, reconnect, or return to the relevant screen.

Limits and important details

• Available controls depend on the current client version, account plan, workspace role, policy, and selected integration surface.
• Processing, indexing, background transfer, provider authorization, or storage accounting can delay a visible result.
• For destructive, access-changing, or automated actions, validate with disposable data before applying the workflow to important files.

Troubleshooting

The expected control is missing. Return to Account settings > Security > Two-factor authentication, confirm the active workspace, and check that your role and client version support the action.

The operation is rejected or stalls. Read the exact message and check permissions, locks, storage, network state, source availability, and any third-party authorization before retrying.

The result is still unclear. Repeat with one small test item, then contact support with the time, client version, workspace, and a nonsecret error, delivery, or request identifier.

Related guides

• Set up two-factor authentication
• Recover two-factor access