Sign in with a recovery code

Use a recovery code when you have lost every strong factor. The same path takes the enrolment code support gives you after a reset.

How do I sign in?

1. On the sign-in page, fill in «Organization» and «Email».
2. Open «Use recovery» and type the «Recovery code» (it starts with AGR2-).
3. Choose «Start recovery».
4. You are in a 15-minute recovery session. The console explains: «Recovery session: add a single replacement authenticator (passkey or Presence), then sign in again with it. Sensitive operations are blocked.»
5. Choose «Complete recovery: create passkey» and confirm on the device.
6. The console shows «New passkey created. The recovery session has ended; sign in now with ProofFlow.»
7. Sign in again with the new passkey.

What can I do in the recovery session?

Only create a replacement passkey. You cannot approve operations, administer, generate new codes or link a phone. If you try, «Complete the recovery: add a passkey or a Presence authenticator and sign in again with it.» appears.

After recovering

1. Generate a new set of recovery codes.
2. Remove the lost devices under «Trusted devices» and «My phones».
3. Link your new phone, if you use one.

The connection dropped halfway

The console may show «Confirm result». Use it: it confirms the outcome without spending another code. If «The time to resume has run out. This does not confirm whether the code was used.» appears, try signing in with any passkey you may have created, or use another code.

I cannot create a passkey

Without a device that supports passkeys, the recovery cannot be finished in the console. Contact your organization's support.