Recovery codes#
There is no email on this site. Nothing is sent to you and there is no reset link, so codes are how you get back in on your own. There are two sets, they do different jobs, and each is refused where the other belongs.
Both live on Sign in and security, at careers.globalfurry.tv/account/security.
| Account recovery codes | Two factor backup codes | |
|---|---|---|
| How many | Ten, each usable once | Ten, each usable once |
| What it does | Sets a new password | Gets you past the second step of signing in |
| Where you use it | The recover your account page | The sign in page, after your password |
| Sets a password | Yes | Never |
| When you got them | Straight after registering | When you generated them |
Account recovery codes#
One of these plus nothing else sets a new password on your account. Treat one like your password: anybody holding a code can take the account.
You were shown ten when you registered, once. To use one, go to recover your account, give your username or email and one code, and set a new password.
Setting a new password that way:
- uses that code up,
- signs out every other browser,
- and removes every trusted device on the account.
If the account has a passkey, the passkey is asked for too, or one of your two factor backup codes in its place. That is deliberate: a single lost code should not be enough to take an account over.
Two factor backup codes#
A different set of ten. They get you past the second step of signing in, when you cannot reach Telegram or the device your passkey is on. They never set a password and they are never accepted on the recovery page.
Generate them before you need them. The site will not let you turn on the Telegram code at sign in until you have. It warns you when you add your first passkey, for the same reason. That passkey belongs to the device you just used, so signing in anywhere else needs a backup code until you add a passkey there too.
Generating a set#
On the Sign in and security page, each set has its own Generate a new set. Each asks for your current password. This changes how signing in works, and a session on its own is not enough.
warning
Generating a new set immediately cancels every code in that set. The other set is untouched. The new codes are shown once and cannot be recovered afterwards, only replaced again.
Each set shows how many are left. Once fewer than three remain, the page says so and asks you to generate a new set. At zero it says what that means:
- No account recovery codes left: without one, nobody can get you back into the account on their own.
- No two factor backup codes left: generate a set before you need one.
Keeping them#
- Copy puts the set on your clipboard. Download saves a plain text file with the date on it.
- Keep them somewhere you will still have them if you lose the device you are reading this on. A password manager, a note somewhere private, or paper all work.
- Do not keep them in a chat with anybody, including yourself.
If you have lost both the password and the codes#
Somebody with no recovery codes cannot get back in alone. No amount of proving it to the site will help, because there is nothing left for it to check.
An admin can reset the password for you once they are satisfied you are who you say you are. Ask in the GFTV Telegram group, or wherever you normally reach the team. Expect to be asked something only you would know.
This is the one part of the site where a person has to make a judgement, so it is worth avoiding. Generate a fresh set the moment you notice you are running low.