Use and replace recovery codes

When you turn on two-step verification you get 10 recovery codes. Each one lets you sign in once without your authenticator app, for example if you lose your phone. They look like ABCD-EFGH-JKLM.

Sign in with a recovery code

1. Sign in with your email and password as usual.

2. On the Two-step verification page, choose Use a recovery code.

3. Enter one of your unused codes in Recovery code and choose Continue. Capitals and hyphens don’t matter.

   Result

   You are signed in. That code no longer works, and we email you to say a recovery code was used and how many you have left.

Check how many codes you have left

The Two-step verification section of your Security page says, for example, On since 14 Oct 2026. You have 9 recovery codes left.

Make a new set of codes

Make new codes when you are running low, or if you think someone has seen them.

1. Open your Security page.

2. In Two-step verification, enter Your password and choose Make new recovery codes.

   Result

   A new set of 10 codes appears. Your old codes stop working immediately.

3. Save the new codes and choose I’ve saved them.

Moving to a new phone

Before you reset or hand back your old phone, sign in on your computer with a recovery code, turn two-step verification off and on again from the Security page, and scan the new QR code with the new phone. If your organization requires two-step verification and you can’t turn it off, add Moraph to the new phone’s authenticator app using the transfer feature of the app itself, or ask your organization’s administrator for help.

If you have no device and no codes

You can’t sign in without one of them. Ask your organization’s administrator to contact Moraph, or raise a ticket with Moraph Support from a colleague’s account. Moraph confirms who you are with your organization before restoring access.