Backup codes — emergency access when your authenticator is gone.
Paramant generates 10 single-use backup codes when you set up your authenticator. Each code can substitute for a TOTP code exactly once. Use them if you lose access to your authenticator app.
What backup codes are
A backup code is a pre-generated 12-character token that works in place of your 6-digit TOTP code at login. Once used, a backup code is invalidated and cannot be used again. You start with 10. When they run out, you must contact support for a manual account reset.
Backup codes are as sensitive as your API key. Anyone who has one can sign in to your account without your authenticator device.
Where to find your current codes
Your backup codes are shown once during authenticator setup. If you saved them then, look in the location you stored them. If you did not save them, you need to regenerate a new set (this invalidates all existing codes).
How to use a backup code at login
Go to the login page
Open paramant.app/auth/login and enter your email and API key as usual.
Click "Use a backup code"
Below the TOTP field you will see a link: Use a backup code. Click it. The input switches from a 6-digit field to a text field that accepts your full backup code.
Enter the code
Type or paste one of your unused backup codes and click Sign in. The code is consumed immediately — do not use the same code again.
Re-enroll your authenticator
Once in the dashboard, go to Account → Security → Authenticator and set up a new authenticator app. Do this before the session expires (1 hour), so you do not get locked out again.
How to regenerate backup codes
Dashboard → Account → Security → Backup codes → Regenerate. You will be asked to confirm your TOTP code. The old codes are invalidated the moment you confirm. Save the new set immediately.
Where to store backup codes
- Password managerrecommended — 1Password, Bitwarden, or equivalent as a secure note
- Printed copy — printed and kept in a locked drawer, safe, or filing cabinet
- Encrypted file — password-protected archive stored on offline media
Do not store backup codes in plain-text files, unencrypted cloud notes (Google Keep, Apple Notes default), email drafts, or screenshots in your camera roll.