Lose a device, keep your account

Steps

1. Generate recovery codes and store them somewhere safe.

   What the server will check: Recovery codes issued for your account after you started.

2. Add a second passkey, then remove the first.

   What the server will check: One method added and one removed.

3. Sign in with a recovery code.

   What the server will check: A recovery code was used once and cannot be used again.

When it opens

This lab is planned. It opens when these are in place:

• Recovery codes and passkeys for BTL accounts

The server checks your own account records and sign-in history, and shows only whether each step is done. It never shows the events themselves.

Learn the theory

• Enrollment, replacement, and recoveryAdding and replacing methods
• Enrollment, replacement, and recoveryWhen a device is lost
• Enrollment, replacement, and recoveryRecovery without a shortcut