Multi-factor authentication (MFA) is a security mechanism where users must provide two or more pieces of evidence, or factors, before being allowed access to a product or service, such as Box. It is is an excellent way to add additional security to your system and required to meet zero trust controls. Sometimes it can present certain challenges—for example, if you lose access to your MFA device (whether it be stolen, broken, in airplane mode, or even just out of power) you can temporarily lose access to Box. To mitigate this, you can now use backup codes as a second factor to sign into your Box account.
Box has added MFA backup codes to our MFA capabilities and this allows users to generate single use codes that can be used to access their Box account when other MFA options are not available. These codes expire after a single use, however users can generate new codes as needed. Backup codes effectively serve as failsafe to ensure that valid Box users can always access their accounts, even if they happen to lose access to their device(s).
Learn more about generating Box MFA backup codes here.