Can Seayora tell me what my recovery codes are?

No. We keep a one-way fingerprint of each code so we can check one when you type it, and the codes themselves exist only in the moment we show them to you. Nobody at Seayora can read them back, and anybody who offers to is not from Seayora.

From the guide Account Security: SSO, 2FA & Passkeys.

Recovery codes

Turning on the authenticator app gives you ten recovery codes. Each one signs you in once, and together they are the way back into your account if you lose the phone your authenticator app is on. Save them somewhere you can reach without that phone — a password manager, or printed and kept with your documents.

We show them once and cannot show them again: we store a one-way fingerprint of each code, not the code itself, so nobody at Seayora can read them back to you. Your security settings show how many you have left, and you can generate a fresh set at any time — doing so cancels every code from the previous set immediately.

Once you hold recovery codes, Seayora stops offering to email or text you a code instead of using your authenticator app. That is the point of the authenticator: if a code sent to your inbox were still accepted, anyone who reached your inbox would still reach your account, and the second factor would be protecting nobody. Your recovery codes take that job instead.

Read the whole guide: Account Security: SSO, 2FA & Passkeys

More questions about Account Security: SSO, 2FA & Passkeys