Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Recovery code vs Emergency Kit
I'm an individual user. Per your advice, I've created an Emergency Kit, saved that file in the cloud, printed out several copies that I've given to executors, and placed one in a safe deposit box.
Last week I learned about recovery codes.
Do I need both?
I searched for a handy chart which compares why and when I'd use one versus the other, but didn't find one.
3 Replies
The way I read it is you can use either/or - but consuming a recovery code will reset 'all' your devices as it triggers: "You’ll receive a new Secret Key and create a new 1Password account password." So basically once consumed your printed and safe-kept emergency kit would be rendered useless though you'd still be needing MFA/2FA if you enabled it.
Also, there is a sort of failsafe: "You won’t be able to use a recovery code if you have an active 1Password session or have recently signed in."
So emergency kits should be safeguarded, recovery codes should be safeguarded even more.- 1P_Tommy
Moderator
I have both and protect them both. I agree with Tom, recovery codes are something I consider should be very well protected.
> "You won’t be able to use a recovery code if you have an active 1Password session or have recently signed in."
100% Correct. This is perhaps the largest reason I see emails from folks come in.
I'm a new user and still figuring 1password out, but I think that the way it works is: Your data is encrypted everywhere (on each of your devices and on 1password's servers) and can only be decrypted with the "secret key" that is printed on your emergency kit page. Your login credentials enable you to log in to 1password.com and to unlock the 1password app and browser extension. The recovery code enables you to regain access to logging in and unlocking. So, yes, you need both.
