Use a backup code when your authenticator app is gone
Paramant generates 10 single-use backup codes when you set up your authenticator. Each code replaces the 6-digit code from your app, once. Use them if you lose access to your authenticator app.
What backup codes are
A backup code is a 12-character code, made in advance, that works in place of your 6-digit TOTP code when you sign in. Once used, it stops working. You start with 10. While you can still sign in, you make a new set on your account page. When they have run out and your authenticator app is gone, only support can restore your access.
Backup codes are as sensitive as your API key. Anyone who has one can sign in to your account without your authenticator device.
Where to find your current codes
Your backup codes are shown once during authenticator setup. If you saved them then, look where you stored them. If you did not, you need to generate a new set (this cancels all existing codes).
How to use a backup code to sign in
Go to the sign-in page
Open paramant.app/en/auth/login. Signing in asks for your email address and then a passkey or a 6-digit code. You do not need an API key here.
Click "Sign in with a backup code"
Below the sign-in form it says Lost your authenticator app? Sign in with a backup code. That link opens a separate page, paramant.app/en/auth/backup, with a field for your email address and a field for the backup code.
Enter the code
Enter your email address, type or paste one of your unused backup codes (twelve characters, three groups of four) and sign in. The code is used up straight away. Do not try it a second time.
Set up your authenticator again
Go to Account → Security → Set up a new authenticator. You get a setup email and link a new app with it. Do this straight away: a session ends after an hour without activity, and always after twelve hours.
How to get a new set of backup codes
Account → Security → Backup codes → Regenerate all codes. You confirm with the 6-digit code from your authenticator app, or with a backup code. The old codes stop working the moment you confirm. You see the new set once: save it immediately.
Where to store backup codes
- Password managerrecommended: 1Password, Bitwarden, or equivalent as a secure note
- Printed copy: printed and kept in a locked drawer, safe, or filing cabinet
- Encrypted file: password-protected archive stored on offline media
Do not store backup codes in plain-text files, unencrypted cloud notes (Google Keep, or Apple Notes by default), email drafts, or screenshots in your camera roll.