New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Recovery Codes #210

Open

sench93 opened this issue Jan 29, 2025 · 1 comment

sench93 commented Jan 29, 2025

How can i create recovery codes for clients to use them in case of they lose access to their authenticators.

Collaborator

diegoocampoh commented Feb 27, 2025

@sench93 recovery codes are not part of the RFCs that define TOTP and HOTP.

Recovery codes are temporary passwords that expire once used. Such recovery codes that your system generates should be random and have high entropy.

For example, you can use AWS KMS random generator to create a recovery code of 32 alphanumeric characters and use that as the recovery code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment