build 3.0.0 · aes-256-gcm / ml-kem-768 · eu/de · ram only

Backup codes — emergency access when your authenticator is gone.

Paramant generates 10 single-use backup codes when you set up your authenticator. Each code can substitute for a TOTP code exactly once. Use them if you lose access to your authenticator app.

What backup codes are

A backup code is a pre-generated 12-character token that works in place of your 6-digit TOTP code at login. Once used, a backup code is invalidated and cannot be used again. You start with 10. When they run out, you must contact support for a manual account reset.

Backup codes are as sensitive as your API key. Anyone who has one can sign in to your account without your authenticator device.

Where to find your current codes

Your backup codes are shown once during authenticator setup. If you saved them then, look in the location you stored them. If you did not save them, you need to regenerate a new set (this invalidates all existing codes).

How to use a backup code at login

1

Go to the login page

Open paramant.app/auth/login and enter your email and API key as usual.

2

Click "Use a backup code"

Below the TOTP field you will see a link: Use a backup code. Click it. The input switches from a 6-digit field to a text field that accepts your full backup code.

3

Enter the code

Type or paste one of your unused backup codes and click Sign in. The code is consumed immediately — do not use the same code again.

4

Re-enroll your authenticator

Once in the dashboard, go to Account → Security → Authenticator and set up a new authenticator app. Do this before the session expires (1 hour), so you do not get locked out again.

How to regenerate backup codes

Dashboard → Account → Security → Backup codesRegenerate. You will be asked to confirm your TOTP code. The old codes are invalidated the moment you confirm. Save the new set immediately.

Where to store backup codes

Do not store backup codes in plain-text files, unencrypted cloud notes (Google Keep, Apple Notes default), email drafts, or screenshots in your camera roll.


Common questions

I used all 10 codes and still can't get in.
Contact privacy@paramant.app from the email address on your account. We will verify your identity and manually reset your authenticator enrollment. Response time is within 48 hours.
Can I see which codes I have already used?
No. The dashboard shows only how many codes remain. Once a code is used it is gone. If you are unsure which codes are still valid, regenerate a fresh set while you still have TOTP access.
Do backup codes expire?
Unused backup codes do not expire on their own. They are invalidated only when you regenerate a new set, or when your account is reset.

Related

Lost authenticator access

What to do when you have no backup codes left.

Set up your authenticator

Full guide to enrolling a new authenticator app.