Get Google Authenticator Backup Code: A Frustrating Experience

When I set up two-factor authentication (2FA) for my Google account using Google Authenticator, I thought I had taken all the necessary steps to secure my account. However, when I lost my phone and forgot my password, I realized that I was in a precarious situation. The biggest problem is not just forgetting the password, but also remembering the 2FA secrets.

I tried storing the 2FA secrets inside an encrypted file stored in my password manager, but with their own password. This seemed like a good idea at first, but then I thought, 'Where else am I supposed to put them?' Printing them out and keeping them safe is not an option, as they can easily be lost or stolen.

Unfortunately, Google's backup codes do not provide a solution to this problem. When trying to use the backup code instead of the 2FA code, I received an error message with no option to enter the backup code. The only way to verify my identity is by entering a valid 2FA code, which defeats the purpose of having a backup code.

I also tried re-authenticating to access the 2FA page, but there was no option to use a backup code or SMS verification to pass the 2FA challenge. To make matters worse, when I tried to load the Two-factor authentication page, I was forced to re-authenticate with Google, which meant I had to provide my password and 2FA code again.

To disable 2FA or generate new 2FA backup codes, I need access to the 2FA settings page under the Security tab. However, this requires me to log in to my Google Account first, which is a challenge since I have forgotten my password.

I am sharing this experience with the Hacker News community to warn others who may be planning to use 2FA backup codes or SMS recovery to remove old 2FA setups and set up new 2FA codes. Unfortunately, these methods may not be possible in case of losing your phone and forgetting your password.

Get google authenticator backup code