Skip to content
Rack Gateway

Backup Codes

Backup codes provide emergency access if you lose your primary MFA device.

Key Facts

Section titled “Key Facts”
  • 10 one-time codes generated per batch, each 12 characters (0-9 and A-F)
  • Each code works once; case, spaces and hyphens don’t matter when you enter one
  • Codes are only shown when generated; the gateway stores only hashes
  • Backup Codes in Account Security shows how many unused codes you have and when they were generated

Getting Backup Codes

Section titled “Getting Backup Codes”

During Enrollment

Section titled “During Enrollment”

When you enroll your first MFA method, the UI displays a fresh set of backup codes. Download or copy them immediately.

Regenerating Codes

Section titled “Regenerating Codes”
  1. Go to Account Security
  2. In Backup Codes, click Regenerate backup codes (this needs a step-up)
  3. Click Download latest codes

Regenerating codes invalidates all previous codes.

Using a Backup Code

Section titled “Using a Backup Code”

Web UI

Section titled “Web UI”

Enter a backup code when prompted for MFA.

CLI

Section titled “CLI”

At the CLI’s MFA code prompt (Enter MFA code (TOTP or backup code):), enter a backup code instead of a TOTP code, or pass it with --mfa-code. Login MFA happens in the browser, where Use a backup code switches the prompt.

Best Practices

Section titled “Best Practices”
  • Store codes in a password manager or secure vault
  • Regenerate after heavy use
  • Treat codes like passwords