Where can I download my MFA recovery token codes ?

Jules (ArchPhoenix Team) 16

Greetings,

When activating TOTP on my account, there was no link to download my recovery tokens (as codes).
Searching through my profile and official documentation, nothing to be found.

It means that, if my device is lost, or if the database of my TOTP software gets corrupted for any reason, I will be locked out of my account, losing the whole domain.

Other service operated by Microsoft, Github, provides such recovery token as seen here.
Competitors provide such recovery tokens too.

Using this step is not adequate as I won't be able to apply it to myself if I cannot log to the admin account.

James Hamil 27,001 Reputation points Microsoft Employee

2020-11-26T00:16:59.587+00:00

Hi, do you still require assistance? If not, please mark the answer as verified.

Thank you,
James
Jules (ArchPhoenix Team) 16 Reputation points

2020-11-26T00:24:01.947+00:00

Yes, I still haven't found a way to get recovery code when using TOTP (not MS Authenticator)

1 answer

SUNOJ KUMAR YELURU 15,001 Reputation points MVP

2020-11-11T01:01:32.477+00:00

@Jules (ArchPhoenix Team)
you can now actually backup & recover accounts in the app

Back up and recover account credentials using the Microsoft Authenticator app

Check on the above links to recover the account.

----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.
Jules (ArchPhoenix Team) 16 Reputation points

2020-11-11T11:46:57.05+00:00

This method require to leak recovery information to a personal account, does not seem to work offline (server room without Wi-Fi and no LTE coverage) and require an Android or iOS device.

Personal account can be lost and would not be under my control for recovery, opposed to a physical safe at the bank where I would just need to prove I'm me and access a paper with few tokens printed without indication of it's usage.

Original question specifically talk about TOTP device and not a specific phone or software because TOTP device could be dedicated hardware, or a smartphone not runing Android or iOS.

Microsoft authenticator software is not available as a raw .deb package and there is too much overhead to run a virtual machine on a phone just for one specific application that may fail because it may require gsf to work.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Where can I download my MFA recovery token codes ?

1 answer

Your answer