Two-Factor Plugins Move Recovery Codes Off Email
Emailing backup codes to the same inbox that just got phished was a tradition. A round of plugins now force a download at enrollment.
by Sam Calder·July 26, 2026·0 Comments
Recovery codes in email are a second password with worse hygiene. The newer enrollment flow makes you save a file or print a page before it lets you close the modal.
Clients will complain. Let them. The ticket you do not want is the one where the inbox and the site fell over together.
