What are 2FA backup codes and how do I use them?

What backup codes are

When you enable 2FA, we generate 8 random 8-digit codes, each usable once as a substitute for your TOTP code. Use them when:

• Your phone is dead, lost or stolen
• You wiped your authenticator app and didn't have a backup
• You're traveling and don't have your usual device

How to save them

The setup screen shows them once. After that, we never display them again (security feature — backup codes in our database are hashed, just like your password).

Recommended storage:

1. Print and put in a fireproof safe (best for high-value accounts)
2. Save in your password manager as a secure note attached to your Cinoslots login
3. Store an encrypted copy on a USB drive with your other emergency credentials
4. Write down twice — keep one with you when traveling, one at home

Don't do this

• ❌ Email them to yourself
• ❌ Save them in plain text on your desktop
• ❌ Take a screenshot and leave it in your phone's photo album
• ❌ Tell support you "didn't bother saving them" (we hear this monthly; it always ends in pain)

Using a backup code

On the 2FA prompt during login, click Use backup code instead. Enter one of your 8 codes. After successful use, that specific code is permanently marked used and can never work again.

Running out

If you've used 6 of 8 codes, the system shows a warning prompting you to regenerate. Regenerating invalidates all old codes (used and unused) and prints 8 fresh ones. Save the new set with the same care.

Lost ALL backup codes AND phone

You'll need to recover via manual support — see account locked. The process involves photo ID, last-3-deposit verification, and a video call for high-balance accounts. Allow 24–48 hours.

Why we have this rather than SMS recovery

SMS recovery is the #1 attack vector for account takeovers across the entire crypto industry. Backup codes you store offline are immune to remote attack — they only work if a thief physically holds your paper.