What’s the point of 2FA, if there’s a recovery code you can use when you lose ability to use your 2FA device?

Question

In the end, isn’t that recovery code just the same as a password?

In: 174

Answer 1

it also depends on the quality of the recovery password

in our case the btit locker password is 32 long and contains roughly 25% of each: upper case letters, lowercase letters numbers, and symbols and us rotated every time somebody uses it. or 90 days when it comes due.

and only it has this and you generally need to be physically have them type it in.