Description

Ensure that the OVHcloud account has a valid set of two-factor authentication backup codes, and that they are stored securely, for example in a password manager. Backup codes are single-use codes that let you sign in if your 2FA device is lost, stolen, or broken.

Rationale

If the only 2FA device is lost and no backup codes are available, the account owner can be locked out of the Control Panel, and recovery requires a slow identity check with OVHcloud support. Keeping valid backup codes makes sure the account can always be recovered quickly without weakening its security.

Impact

  • The account can be recovered if a 2FA device is lost

  • Avoids long lock-outs from the Control Panel

  • Backup codes must be stored securely, as each can be used to sign in

Default Value

10 single-use backup codes are shown when the first 2FA method is set up. They are not generated if 2FA is never enabled, and they run out as they are used.

Pre-Requisites

  • Two-factor authentication enabled on the account

  • A secure place to store the codes, such as a password manager

Test Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. Click your name in the top-right corner to open your account menu, then go to Security (the Account security page).

  3. In the Two-factor authentication section, verify that backup codes are active.

  4. Confirm that the codes are stored in your password manager and that not all of them have been used.

  5. If backup codes are missing, used up, or lost, follow the implementation steps.

Implementation Steps

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. Click your name in the top-right corner to open your account menu, then go to Security (the Account security page).

  3. In the Two-factor authentication section, find the backup codes and select the option to regenerate them.

  4. Copy the 10 new codes and store them in a password manager. The old codes stop working.

Backout Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. Click your name in the top-right corner to open your account menu, then go to Security (the Account security page).

  3. In the Two-factor authentication section, regenerate the backup codes again if the new set is lost.

Reference