Recovery codes
Recovery codes are one-time backup codes for signing in when your authenticator app is unavailable. Actualog shows them after MFA setup. Save them before leaving the page.
How to store them
Use a private, secure place such as:
- a password manager;
- a secure company-approved secret store;
- an encrypted personal notes vault.
Do not put recovery codes in a public channel, support ticket, shared document, or screenshot folder. Anyone with a valid recovery code and your password could complete sign-in.
Business rules
- Each recovery code can be used only once.
- Actualog administrators cannot view your recovery codes.
- Actualog administrators cannot set up MFA for you.
- Recovery-code sign-in does not trust the browser.
- If you believe the codes were exposed, regenerate them after signing in.
If you lose both the app and the codes
Contact your Actualog security or application administrator. The planned emergency MFA reset workflow requires an administrator's own fresh MFA and separate identity verification before protected access can be restored.