🛟 Recovery / Backup Codes
The one-time recovery or backup codes a site gives you for when your authenticator is lost, with the site and account they belong to.
- Keep the codes here rather than in a file or a printout, so every look at them is audited.
Type id: type-recovery-codes. Agents and sneakers-put name the type by this id; sneakers_list_secret_types lists it.
🧾 Fields
| Field | Key | Kind | Required | Secret | Notes |
|---|---|---|---|---|---|
| Description | description | Multi-line text | No | No | |
| Service / Site | service | Text | Yes | No | |
| Account / Username | account | Text | No | No | |
| Recovery / Backup Codes | codes | Multi-line text | Yes | Sensitive | |
| Notes | notes | Multi-line text | No | No |
🔒 What's secret
Recovery / Backup Codes is masked until someone who can read the secret reveals or copies it, and every reveal and copy is written to the audit trail. Everything else is plain metadata that anyone who can see the folder can see.
🔁 Heartbeat, rotation and check-out
- Heartbeat: no.
- Rotation: no.
- Check-out: no.
🎯 Targets
Recovery / Backup Codes take no target.