Recovery codes provide a secure way to regain access to your Tines account if you lose access to your regular login method. Each code can only be used once and is automatically invalidated after use.
They can be useful to regain access to your account if your authentication system is unavailable or misconfigured. For example, if your SSO settings are incorrect, your identity provider is having issues, or you are unable to access your email account.
🪄Tip
Setting up recovery codes
Only tenant owners have the ability to generate recovery codes, and they can only be used by active users. To set up recovery codes, follow these steps:
Ensure the "User recovery codes" feature is turned on for your tenant in Authentication settings.
Navigate to the User page
Use the banner at the top or find your user profile
Click "Generate recovery codes"
Save the displayed codes in a secure location
Important: The codes will only be shown once and cannot be recovered if lost. Store them securely before closing the modal. They can be regenerated at any time.
Using recovery codes
When you need to use a recovery code, visit the https://<tenant-domain>/login/recovery page. Enter one of your saved recovery codes in the field and click "Continue". If the code is valid, you'll be automatically logged into your account. Remember that each code can only be used once - after successful use, it will be automatically invalidated.
Security considerations
The security of your recovery codes is paramount. We recommend storing them in a secure password manager or on another trusted secure storage solution. Never share your recovery codes with anyone, as they provide direct access to your account. You should immediately deactivate or regenerate codes if you suspect they're compromised.
As a tenant owner, you have control over the tenant's recovery codes. You can view which users have recovery codes enabled directly from the users list, and you have the ability to delete recovery codes for any user if necessary.
Every attempt (successful or otherwise) to login using recovery codes will be recorded in an audit log.