Manage MFA and recovery codes

Review status

Account shows whether MFA is enabled. Regenerating recovery codes invalidates all previous codes, so replace stored copies immediately.

Disable MFA only after reauthentication and when required; re-enable it as soon as possible. If every factor and recovery code is lost, use the verified account recovery process—support should never request your password or authenticator secret.