How to Use Recovery Codes for Facebook Account Access in the Facebook App (2026 Guide)

By App World Team | Published: August 4, 2026 | Updated with latest Meta Accounts Center instructions

Reading time: ~12 minutes | Category: Facebook Security & Account Recovery

Losing access to your Facebook account because of two-factor authentication (2FA) can feel stressful — especially when your phone is lost, the authenticator app is unavailable, or SMS codes fail to arrive. Facebook provides a reliable safety net for exactly this situation: recovery codes (also called login recovery codes or backup codes).

These are one-time-use codes generated after you enable two-factor authentication. You can enter one in place of the usual 6-digit authenticator or SMS code when logging into the Facebook app (or website). This complete 2026 guide walks you through everything you need: what recovery codes are, how to generate them inside the Facebook app, how to use them for account access, best practices for storing them securely, troubleshooting common issues, and what to do if you never saved any codes.

All steps are based on the current official Facebook Help Center documentation and the Meta Accounts Center interface used in the Facebook mobile app for Android and iOS as of mid-2026.

What Are Facebook Recovery Codes?

Facebook recovery codes are a set of 10 single-use codes that act as a backup method for two-factor authentication. Once you turn on 2FA (via authentication app, SMS, or security key), Facebook lets you generate these codes under the “Additional methods” section.

Key facts:

• You receive 10 codes at a time.
• Each code works only once.
• They replace the normal 2FA code (authenticator app or SMS) during login.
• They are available only if you generate and save them before you lose access to your primary 2FA method.
• You can request a new set of 10 codes at any time (this invalidates the previous set).

Official Facebook documentation states: “If you've turned on two-factor authentication, you can get 10 recovery login codes to use when you're unable to use your phone. Once you have your recovery codes, you can use one in place of your authenticator code when logging in.”

These codes are especially valuable when traveling without reliable cellular service, after a phone is lost or damaged, or when switching devices before transferring authenticator apps.

Prerequisites: Enable Two-Factor Authentication First

You cannot generate recovery codes until two-factor authentication is active on your account. If you have not set it up yet, do so first through the Facebook app:

1. Open the Facebook app and tap the menu icon (three horizontal lines, usually bottom right on iOS or top right/bottom on Android).
2. Scroll down and tap Settings & Privacy → Settings.
3. Tap Accounts Center (or Meta Account settings on some accounts).
4. Tap Password and security.
5. Tap Two-factor authentication and select your account.
6. Choose your preferred method (Authentication app is recommended for strongest security; SMS or security key are alternatives) and follow the on-screen prompts to complete setup.

Once 2FA is confirmed, you can immediately generate recovery codes.

How to Generate Recovery Codes in the Facebook App (Android & iOS)

The process is nearly identical on both platforms and uses the unified Meta Accounts Center.

1. Open the Facebook app and ensure you are logged in.
2. Tap the menu icon (☰ three lines).
3. Scroll to the bottom and tap Settings & Privacy, then Settings.
4. Tap Accounts Center.
5. Tap Password and security.
6. Tap Two-factor authentication, then select the specific account you want codes for. You may be asked to re-enter your password.
7. Under the section “How you get login codes,” tap Additional methods.
8. Tap Recovery codes.
9. Tap Get new codes (or Show codes if codes already exist).

Facebook will display a list of 10 codes. Write them down carefully, take a screenshot and store it offline securely, or print them. Do not store them only in the same phone or cloud account that could also be compromised.

Important: Each code can be used only once. If you run out or lose the list, return to the same menu and tap Get new codes to generate a fresh set (the old ones become invalid).

How to Use Recovery Codes for Facebook Account Access in the Facebook App

When you try to log in and Facebook prompts you for a two-factor authentication code, follow these steps:

1. Open the Facebook app on your device.
2. Enter your email, phone number, or username and your password as usual.
3. When the screen asks for the 6-digit security code from your authenticator app or SMS, look for the option that says something similar to “Need another way to authenticate?”, “Having trouble?”, “Try another way”, or “Need help?” (wording can vary slightly by app version and platform).
4. Select the option to use a recovery code (often labeled “Use a recovery code,” “Enter recovery code,” or “Use an 8-digit recovery code”).
5. Enter one unused recovery code from your saved list. Enter digits only — no spaces or dashes.
6. Submit the code. If it is valid and unused, you will be logged in.

After successful login with a recovery code, immediately go back to the Two-factor authentication settings and generate a new set of codes if needed. Also review your other 2FA methods and consider adding a second backup method (for example, both an authenticator app and a security key).

The same recovery codes work on the Facebook website and mobile browser if you prefer to log in that way.

Best Practices for Storing and Managing Recovery Codes

Recovery codes are only useful if you can actually find them when needed. Follow these recommendations:

• Store offline and securely — Write them on paper and keep them in a safe place (home safe, locked drawer). Avoid storing only digitally on the same device.
• Use a password manager — Many modern password managers (Bitwarden, 1Password, etc.) have secure notes or dedicated fields for recovery codes. Encrypt them properly.
• Make multiple copies — Keep one copy at home and another in a secure secondary location.
• Never share them — Treat recovery codes like passwords. Facebook support will never ask you for them.
• Regenerate periodically — If you suspect the list may have been exposed, generate a new set.
• Mark used codes — Cross them off as you use them so you know which remain valid.

Generating new codes is free and takes only a few seconds, so there is no downside to refreshing them after any major device change.

What If You Lost Your Recovery Codes or Never Generated Them?

If you did not save recovery codes in advance, you cannot generate them while locked out. Facebook’s official troubleshooting options then become:

• Approve the login attempt from a device or browser where you are already logged in (check notifications on that device).
• Use a trusted/recognized device or network that Facebook already associates with your account.
• Request identity verification through Meta’s recovery flow (this may involve uploading a government-issued ID photo or completing a video selfie verification).

To start the identity confirmation process:

1. Attempt to log in until you reach the 2FA code screen.
2. Tap the help option (“Having trouble?”, “Need help?”, or “Need another way to authenticate?”).
3. Follow the prompts to “Get more help” or submit identity verification.

Meta reviews these requests and typically responds via the email or phone associated with the account within a couple of business days. Success rates improve when you use a familiar device and network.

Prevention is far better: generate and securely store recovery codes as soon as you enable 2FA.

Additional Security Tips Related to Facebook Recovery Codes and 2FA

• Prefer an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, etc.) over SMS whenever possible — SMS can be vulnerable to SIM-swapping attacks.
• Add a hardware security key if your devices support it for even stronger protection.
• Enable login alerts so you receive notifications of unrecognized logins.
• Regularly review “Where you’re logged in” inside Password and security settings and log out of unknown sessions.
• Keep a secondary email and phone number updated in your Accounts Center contact info.
• Consider creating a passkey for passwordless login on supported devices (an emerging Meta feature that can simplify future access).

These layers work together with recovery codes to keep your account both secure and recoverable.

Frequently Asked Questions

Are Facebook recovery codes the same as Instagram backup codes?
No. Even if accounts are linked in the same Meta Accounts Center, Facebook recovery codes and Instagram backup codes are separate. You must generate and use the codes specific to each platform.

How many digits are Facebook recovery codes?
They are typically presented as 8-digit numeric codes (some older references mention variations, but current generation shows single-use codes you enter as shown).

Can I use recovery codes on the Facebook Lite app or mobile browser?
Yes. The codes work across the main Facebook app, Facebook Lite, mobile web, and desktop site once generated.

What happens if I enter an already-used recovery code?
It will be rejected. Use a different unused code from your list or generate a new set after regaining access.

Do recovery codes expire?
They do not have a time-based expiration, but each can be used only once. Generating a new set immediately invalidates the previous ones.

Is it safe to screenshot the codes?
Only if you immediately move the screenshot to a secure offline location or encrypted storage and delete it from the device camera roll and cloud backups.

Conclusion

Facebook recovery codes remain one of the simplest and most effective ways to regain account access in the Facebook app when your primary two-factor authentication method is unavailable. By generating the 10 single-use codes through the Accounts Center → Password and security → Two-factor authentication → Additional methods path, storing them securely offline, and knowing exactly how to enter one at the login prompt, you turn a potential lockout into a quick recovery.

Take a few minutes today to check whether you already have recovery codes saved. If not, generate them now while you still have full access. Combined with strong passwords, an authenticator app, and regular security reviews, recovery codes give you both protection and peace of mind.

For the most up-to-date official instructions, always cross-reference the Facebook Help Center pages on setting up login recovery codes and troubleshooting two-factor authentication login issues. Meta occasionally updates the Accounts Center interface, but the core recovery-code functionality has remained consistent and reliable.

Stay secure, and never lose access to your Facebook account again.

---

This guide was researched and written by the App World Team using the latest official Meta/Facebook documentation available in 2026. Always verify steps inside your own Facebook app, as interface labels can vary slightly by region, app version, and account type.

Source references (for transparency and further reading): Official Facebook Help Center articles on “Set up Facebook login recovery codes” and “Troubleshoot login with two-factor authentication.”