Recovery code

Set a recovery code to cancel 2-factor authentication for the device. This function allows users to cancel 2-factor authentication by entering this recovery code into the password field as a last resort when the authenticator is lost or damaged and the device cannot be logged in, or when 2-factor authentication cannot be cancelled due to lack of network connectivity.


Table of Contents


Issue Recovery Code

Click on the group policy to which you wish to apply the recovery code.
Next, click on the “Recovery code” tab.

Click on the “Issue recovery code” button.

Click the “OK” button when the confirmation message for issuing the recovery code is displayed.

Click the “OK” button when a message appears indicating that the recovery code has been successfully issued.

A Save Recovery Code modal will appear, so keep this code in a safe place.

After closing the modal, only the first 4 characters of the recovery code can be viewed.

This is the procedure for issuing a recovery code.

Once the settings are reflected in macOS terminals belonging to the group policy that issued the recovery code, The recovery code can be used at terminal login. For more information, see “How to use recovery codes with Mac login”.


Reissue recovery code

Click on the group policy to which you wish to apply the recovery code.
Click on the “Recovery code” tab, then click on the “Reissue code” button.

Click the “OK” button when the confirmation message for reissuing the recovery code appears.

Click the “OK” button when a message appears indicating that the recovery code has been successfully issued.

A Save Recovery Code modal will appear, so keep this code in a safe place.

The recovery code reissue procedure has been completed.


Delete recovery code

Click on the group policy issuing the recovery code.
Click on the “Recovery code” tab, then click on the “Delete code” button.

Click the “OK” button when a confirmation message for removal of the recovery code is displayed.

Click the “OK” button when the message “Recovery code deletion succeeded” is displayed.

When a recovery code is deleted, information about previous recovery codes is no longer displayed.

The recovery code removal procedure has been completed.