# Backup codes for two-step authentication 

Backup codes let you disable two-step authentication on your account and sign in if you can’t complete the authentication step. Keep it secure — anyone with your password and backup code has full access to your account.
### Can I get a new backup code?
If you lost your backup code and can still sign in to your account, generate a new code from your [two-step authentication settings](https://dashboard.stripe.com/settings/user). This will invalidate the old code.
### What if I’m locked out of my account and can’t find my backup code?
Follow these instructions to remove two-step authentication from your account if you can’t complete the authentication step and don’t have your backup code.
### What should I do if my backup code is compromised?
If you suspect your backup code is compromised, go to your [two-step authentication settings](https://dashboard.stripe.com/settings/user) and generate a new one as soon as possible. This will invalidate the old code.
### When do I receive a backup code?
Stripe shows you a backup code when you enable two-step authentication for the first time. It’s only displayed once, so it’s important to write it down and keep it safe.
### How should I store my backup code?
**We recommend the following storage methods, from most to least secure:**
* Piece of paper or USB drive locked in a safe or secure deposit box
* Piece of paper in a filing cabinet or somewhere unlikely to be found or photographed
* Dedicated USB drive, only connected to your computer when needed to minimize exposure to malware
* Password manager (as a password field, not as plain text)
**Avoid these storage methods:**
* Cloud storage
* Hard drive
* Removable storage frequently connected to your computer
* Password manager (as plain text)