How to Find Google Backup Codes
Google backup codes are one-time recovery codes that help you sign in when you cannot use your usual two-factor authentication method.
If you need to know how to find Google backup codes, the key is understanding where Google shows them, how to generate fresh codes, and how to keep them secure.
These codes are especially useful if you lose your phone, switch authenticators, or travel without access to your normal verification device.
The exact location can be easy to miss, which is why many people think the codes are gone when they are actually stored inside Google Account security settings.
What Google backup codes are
Google backup codes are single-use 8-digit codes tied to your Google Account.
They are designed as a fallback for two-step verification when you cannot receive a prompt, text message, or authentication code from Google Authenticator or another authenticator app.
Each code can be used only once.
After you use one, it becomes invalid, so you should keep track of which codes remain unused.
Google typically provides a set of 10 codes when you generate them.
- They work as a backup sign-in method.
- They are intended for emergencies, not everyday login.
- They are tied to your Google Account, not to a specific device.
- They should be stored securely because anyone with a code can access your account if they also know your password.
Where to find Google backup codes
If you already generated backup codes, you can find them in your Google Account security settings.
Google does not usually display the full set again after the initial download or print step, so you may need to regenerate them if you cannot locate the original file.
Find them on a desktop browser
- Go to your Google Account.
- Select Security.
- Under How you sign in to Google, choose 2-Step Verification.
- Look for Backup codes.
- If prompted, sign in again to verify your identity.
From there, Google will show whether backup codes are available and may let you view, download, or generate a new set depending on your account status.
Find them on Android or iPhone
You can also access them from the Google app or a mobile browser, but the exact layout may differ.
The same path usually applies: open your Google Account, go to Security, then open 2-Step Verification and look for Backup codes.
If the option is not visible, check whether you are signed into the correct Google Account.
Many users have multiple accounts and accidentally search in the wrong one.
How to generate new Google backup codes
If you cannot find old codes, the most reliable fix is to generate a new set.
Google lets you create fresh backup codes at any time, and generating new ones typically invalidates older codes.
- Open your Google Account.
- Go to Security.
- Select 2-Step Verification.
- Choose Backup codes.
- Select Get backup codes or Show codes.
Google may ask you to reauthenticate before displaying the codes.
Once the codes appear, download them, print them, or write them down and store them in a safe place.
Why regenerating codes matters
Regenerating backup codes is useful if you think an old copy may have been lost, exposed, or saved in an insecure place.
Because backup codes can unlock your account, replacing them reduces risk if a previous set was shared, emailed, or left on a device you no longer control.
What to do if you cannot find backup codes
If you cannot locate your Google backup codes, do not assume your account is inaccessible.
Google offers several account recovery and sign-in methods that may still work.
- Use a Google Prompt on a trusted phone or tablet.
- Try a registered authenticator app.
- Use a security key if you enrolled one.
- Check whether you can receive a text message or phone call.
- Use account recovery if none of the sign-in methods are available.
If you still have access to your account, generate a new backup code set immediately.
If you are locked out, go through Google’s account recovery flow and follow the prompts carefully.
Recovery success often depends on using a familiar device, browser, and location.
How to keep Google backup codes safe
Backup codes are only helpful if they are available when you need them.
At the same time, they must be protected from unauthorized access because they can bypass your usual second factor.
Best storage practices
- Save them in a password manager with strong encryption.
- Print a copy and store it in a secure physical location.
- Keep them away from your regular email inbox.
- Do not store them in unprotected notes apps or screenshots.
- Replace them if you think they were exposed.
A password manager is often the most practical option for digital storage because it keeps the codes encrypted and easy to retrieve during an emergency.
Common mistakes to avoid
- Leaving codes in a shared folder.
- Sending them to yourself by email or chat.
- Saving them in a cloud document with weak access controls.
- Forgetting which set of codes is still active after regeneration.
How backup codes work during sign-in
When Google asks for verification and you cannot use your normal method, choose the option to enter a backup code.
Then type one unused code exactly as shown.
If the code is correct, Google lets you complete sign-in and marks that code as used.
Because each code is one-time use, it is a good idea to cross out or delete a code after you use it.
If you run out, return to Google Account security settings and generate a new set.
Backup codes versus other Google recovery methods
Backup codes are only one part of Google’s security system.
They are best viewed as a fallback, not a replacement for stronger methods such as passkeys, authenticator apps, and security keys.
- Passkeys offer a phishing-resistant sign-in experience.
- Authenticator apps generate time-based codes on your device.
- Security keys provide strong hardware-based verification.
- Backup codes are the emergency option when the others are unavailable.
If you rely on Google services for Gmail, Google Drive, Google Photos, or Google Workspace, it is smart to have more than one recovery method enabled.
That reduces the chance of being locked out when a phone is lost or replaced.
When to refresh your backup codes
You should consider replacing backup codes after major security changes, such as a lost device, a suspected account compromise, or a move to a new authenticator app.
You may also want to refresh them after printing a new set or moving your stored copy to a safer location.
For best practice, review your Google Account security settings periodically and confirm that your recovery email, recovery phone, and two-step verification methods are current.
Small updates now can prevent a large access problem later.