Lost your authenticator app? Using recovery codes

If you lost your phone or uninstalled your authenticator app, use one of your 10 saved recovery codes to get back in.

Lost your phone? Uninstalled your authenticator app? Moved to a new phone without backing up? As long as you saved your 10 recovery codes when you set up 2FA, you can get back in.

ℹ️

Note: Did not save your recovery codes and lost your phone? Email support@cpr.co — a system admin will need to manually reset your account.

How to use a recovery code

1Go to https://cpr.co/login and sign in with your email and password as normal.
2Instead of landing on your dashboard, you will be sent to the 2FA code page (https://cpr.co/login/mfa).
3Click the Use a recovery code link below the 6-digit code box.
4A new input field appears. Type in one of your 10 recovery codes exactly as you saved it (the format looks like XXXX-XXXX).
5Click Submit.
6If the code is valid, you will be signed in.

⚠️

Important: IMPORTANT: after you use a recovery code, your old authenticator app is disconnected from your account. You will need to set up 2FA again with a new authenticator app before anything else.

After signing in: re-enroll

Set up 2FA again on your new phone

1Open your Profile page at https://cpr.co/admin/profile and click Manage 2FA on the Two-factor authentication card (or go directly to https://cpr.co/admin/my-profile/security).
2Click the Enable two-factor authentication button.
3Scan the new QR code with your new phone.
4Enter the new 6-digit code to verify.
5Save your NEW set of 10 recovery codes. These replace the old set — the old codes no longer work.

Why do I have to re-enroll?

When you use a recovery code, the system removes your old authenticator so the lost phone can never be used against your account. The trade-off is that you must set up a new authenticator before your next sign-in. This is safer than leaving the old authenticator active on a device you no longer control.

💡

Tip: If you are a 1Password or Bitwarden user, save your 2FA setup QR code in your password manager when you first enroll. That way, if you ever lose your phone, you can re-scan the QR on a new device without needing a recovery code at all.

Recovery code rules to remember

Things to know

Each code can be used only once. Cross it off your list after use.
You get 10 codes at enrollment. When you regenerate 2FA, you get a fresh set of 10.
Codes are case-insensitive and whitespace-insensitive, so XxXx-xxxx, XXXX-XXXX, and xxxx XXXX all work.
If you are down to 2 or fewer unused codes, the Security page will show a warning. Click Regenerate recovery codes to get a fresh set.

Still stuck? Email support@cpr.co.

Was this article helpful?