What are Recovery Codes?
Your recovery codes are a short list of one-time passwords that only work for your Dashbuilder account. They are like spare keys. Normally you log in with your password plus a code from your phone or authenticator app. If you can't get that code, a recovery code can stand in for it.
When you set up two-factor authentication (2FA) on Dashbuilder, we ask you to download a set of recovery codes before you finish. It can feel like an extra step you could skip, but these codes might be the only thing standing between you and being locked out of your account.
You might need a recovery code if:
- your phone is lost, stolen or stops working
- you get a new phone and your authenticator app doesn't carry over
- you delete or reinstall your authenticator app by accident
- you change your phone number and can no longer receive SMS codes
- you misplace your security key
In any of these situations, a recovery code lets you log in and set up 2FA again on your new device.
Where to Store Your Codes
Ideal Places
- A password manager. If you already use one, save your codes as a secure note alongside your Dashbuilder login.
- A printed copy.
Places to avoid:
- Screenshots in your photo gallery. These often sync to the cloud and are easy for others to see.
- Plain text files on your desktop or in your downloads folder.
- Email drafts or unprotected notes apps.
Treat your recovery codes like a password. Anyone who has them can get past your 2FA, so don't share them with anyone, including people who say they're from Dashbuilder. We'll never ask you for them.
How to use a Recovery Code
1. Go to the Dashbuilder login page and enter your email and password as usual.
2. When you're asked for your 2FA code, select **[Use a recovery code]**.
3. Type in one of your unused codes.
4. Once you're logged in, go to **[Settings → Security]** and set up 2FA on your new device. We also recommend creating a fresh set of recovery codes.
Troubleshooting recovery codes
Recovery codes are shown once, when you set up two-factor. Each one lets you sign in without your authenticator app. You can see them again in Settings › Security, inside the two-factor section.
Problem | Why | Fix |
|---|---|---|
Lost or changed phone, need to sign in | Your authenticator app isn't available | At the code prompt, enter a recovery code instead of the six-digit code |
Recovery code rejected | Typo, extra spaces, or the code has already been used (each code works once) | Type it exactly as saved; try a different code from your list |
Used most of your codes | Each code works once | Sign in, go to Settings › Security and generate a new set; store them safely |
Didn't save the codes at setup | They're only shown during setup and in Settings | If you can still sign in, open Settings › Security and save them now |
No phone and no codes | No second factor left | Ask an admin, or Lluminate support, to help restore access |
Can't find the option to turn two-factor off | It's required by your organisation | Expected: keep two-factor on; use recovery codes if your phone changes |
New phone, want to move the authenticator | The old app holds the link | Sign in with a recovery code if needed, then set up two-factor again on the new phone in Settings › Security |
Worried someone has seen your codes | Codes act like a spare key | Generate a new set straight away; old codes stop working |
Keep them safe: store recovery codes in a password manager or printed somewhere secure, never in email or a shared document.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article