Should you keep screenshots of backup codes?
Why backup codes are different
A one-time code from a text message expires in minutes. A backup code is made to work later, when you've lost your phone. That's what makes it useful, and it's also what makes it risky: whoever has it, along with your password, may be able to get past your two-step login.
Why a screenshot is a risky place
- It sits among your everyday pictures, where anyone with your phone could see it.
- With iCloud Photos on, it's on your other devices too.
- If your phone is stolen, your backup codes go with it, right when you need them.
Where to keep them instead
- On paper, somewhere safe at home. It's simple, and it isn't on the phone you may lose.
- In a password manager that you can open from another device.
Cleaning up old screenshots
- Find them. Search your Photos and look through your screenshots.
- Make new codes in that account's security settings, if the old ones may have been seen. New codes usually replace the old set, but check what your account says.
- Save the new ones safely.
- Delete the screenshot, then remove it from Recently Deleted. Otherwise it stays for 30 days.
And old one-time codes?
Screenshots of old one-time codes are usually harmless, because those codes expire. You can usually just delete them.
How FirstHour helps
Protect looks for these on your iPhone, and shows Backup codes separately from Old one-time codes, so you can see which ones matter. Nothing is uploaded. It can miss things, and it can't make new codes for you. Only the account can do that.
Questions
Is it fine if the screenshot is in my Hidden album?
It's better than your camera roll, but the Hidden album opens with your iPhone passcode. Paper or a password manager is safer for something this important.
What if I've lost my backup codes?
If you can still sign in, go to that account's security settings and make a new set.
Sources
- Sign in with backup codes, Google
- Delete or hide photos and videos on iPhone, Apple Support