> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vindicia.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Generate a Backup Code in Vindicia IDP 2.0 Console

A backup code (BUC) is temporary one-time code used for account validation when a user's two-factor authentication is not available and the user therefore can't complete their authentication during the MFA process.

A backup code (BUC) is needed when the user's 2 Factor Authentication (2FA) method isn't accessible. The BUC helps when the user can't complete their authentication during the MFA process. Such as:

* When the user exceeds the maximum allowed number of 2FA attempts.
* When all previously generated BUCs have been utilized.
* In cases where the user cannot access their authenticator app due to technical issues.
* If the user has lost their device, such as their phone or tablet.

You can generate a one-time backup code (BUC) on behalf of a user. The user must have at least one factor registered for two-factor authentication (2FA) in order to generate a BUC for them.

**Note:** This code should be read out to the user on the phone or a secure method and should not be sent over a notification channel.

1.

Sign in to Vindicia IDP Console 2.0 by clicking **Manage Users** Link in the Vindicia Portal under your account avatar.

The User Management screen appears.

<img src="https://mintcdn.com/vindicia-retain/ELV_aMa-N6mnHKqi/portal/vindiciaCareIDP/images/adminVinIDPSearch.png?fit=max&auto=format&n=ELV_aMa-N6mnHKqi&q=85&s=b2d4a74064e22754ce7e70bf41773952" alt="Vindicia IDP 2.0 Console User Management Page listing users" width="1918" height="1114" data-path="portal/vindiciaCareIDP/images/adminVinIDPSearch.png" />

2.

[Search for the relevant user](adminSearchUser) or select the user from the list.

The selected user's **Identity** page opens.

3. Generate a backup code by selecting the **Actions** > **Generate a backup code for 2FA** link located in the top-right corner.

   <img src="https://mintcdn.com/vindicia-retain/ELV_aMa-N6mnHKqi/portal/vindiciaCareIDP/images/careGenerateBucLink.png?fit=max&auto=format&n=ELV_aMa-N6mnHKqi&q=85&s=a58301494d8150802b93e0ccbba903db" alt="Generate backup code link" width="1918" height="504" data-path="portal/vindiciaCareIDP/images/careGenerateBucLink.png" />

The system generates a one-time backup code (BUC) that is supplied to the user in a secure way. The user enters the BUC, authenticates, and regains access to their account.

After the user completes a successful authentication and regains access to their account again, they should perform the following tasks:

* Register a new 2FA method to ensure secure account validation in the future.
* Remove any outdated 2FA factors that are no longer functional.
* Generate a fresh set of backup codes for future use.

**Parent topic:**[Vindicia IDP 2.0 Console User Management Capabilities](../topics/userManagement2Capabilites)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.