Facebook recovery codes are 10 one-time backup codes you can type instead of a two-factor login code when you can't get to your phone. Get them in Accounts Center under Password and security, then Two-factor authentication, Additional methods and Recovery codes. Print or write them down and keep them somewhere safe, away from your phone.
Two-factor authentication is brilliant until your phone is lost, broken, stolen or out of battery in another country. Recovery codes are the spare key for exactly that moment. They take two minutes to set up, and they're the difference between logging straight back in and waiting days for Facebook to confirm your identity.
How to get your Facebook recovery codes
- Click your profile picture at the top right of Facebook.
- Choose Settings & privacy, then Settings.
- Open Accounts Center, then Password and security.
- Click Two-factor authentication and pick your account. You may need to enter your password again.
- Under How you get login codes, click Additional methods, then Recovery codes.
- Click Get new codes.
You'll see 10 codes. Print them or write them down. If you don't see the option, two-factor authentication probably isn't on yet: Facebook says you need it set up before recovery codes are available.
The rules for recovery codes
| Rule | What it means for you |
|---|---|
| 10 codes at a time | Enough for ten logins without your phone |
| Each code works once | Cross off each code as you use it |
| Get new codes any time | Clicking Get new codes gives you a fresh set if you lose or use them up |
| They replace your login code | Type one where Facebook asks for your two-factor code |
When you get a new set, assume the old list is no longer the one to rely on, and replace your printed copy so you're not hunting for the right sheet when you're locked out.
Recovery codes vs your other two-factor options
Facebook offers three main ways to confirm a login, and recovery codes back up all of them:
| Method | How it works | Weak spot |
|---|---|---|
| Text message (SMS) | Facebook texts a code to your mobile number | Texts can be delayed, and you need signal and the same number |
| Authentication app | An app such as Google Authenticator or Duo Mobile shows a code | If the phone with the app is lost, so are the codes |
| Security key | You tap or insert a physical key | You need the key with you |
| Recovery codes | Ten printed one-time codes | Only useful if you kept them somewhere safe |
The best setup for most people is an authentication app or a security key as the main method, with recovery codes as the backup. Text codes are better than nothing, but they're the method most likely to let you down when you're travelling or have changed your number.
Where to keep them
- On paper, at home. A printed sheet in a drawer is safe from hackers and doesn't disappear with your phone.
- In a password manager. If you use one, store the codes in your Facebook entry, as long as you can reach the password manager without the same phone.
- Not in your phone's notes or photos. If you lose the phone, you lose the codes with it, which defeats the point.
- Not in your email. If someone gets into your email, they're halfway into your Facebook too.
How to log in with a recovery code
- Log in with your email or phone number and password as usual.
- When Facebook asks for your two-factor code, type one of your recovery codes instead.
- Once you're in, cross that code off your list.
- Set up your two-factor method again on your new phone or app, so you're not relying on the codes.
Locked out with no recovery codes?
Facebook lists other routes, in this order:
- Wait a few minutes for a text code. Texts can be delayed by your mobile network.
- Approve the login from another device. If you're still logged in on a laptop or tablet, check its Facebook notifications for an approval prompt.
- Ask Facebook to confirm your identity. On the code screen, use Need another way to authenticate? on a computer, Having trouble? on Android or mobile web, or Need help? on iPhone or iPad. You may be asked for a photo of government ID.
Facebook says identity checks typically take 1-2 business days, and that they don't work in Facebook Lite, so use the full app or a browser. That wait is the best argument for saving recovery codes today. If your account is locked for other reasons, see my guide on why Facebook disables or locks accounts.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Why you keep being asked for a code
If Facebook asks for a code every single time you log in on your own computer, check your browser. Facebook says private browsing, or a browser set to clear its history when it closes, can stop it recognising your computer. And when Facebook offers to Save this browser, say yes on your own devices but never on a shared or public computer.
My verdict
If you've turned on two-factor authentication, get your recovery codes now and put them somewhere that isn't your phone. It's the single most useful thing you can do to avoid a days-long lockout. If you'd like to switch account on a shared device afterwards, here's how to add another account on Facebook.
Frequently asked questions
Where do I find my Facebook recovery codes?
In Accounts Center, go to Password and security, then Two-factor authentication, Additional methods, then Recovery codes.
How many recovery codes does Facebook give you?
Ten. Each code can only be used once, and you can get a new set at any time.
Why can't I see recovery codes on Facebook?
You need two-factor authentication turned on first.
What if I lost my recovery codes and my phone?
Try approving the login from another device, or use the help link on the code screen to confirm your identity with Facebook.
