← ACARA Digital Technologies Years 7–8

Backup codes and account recovery

One-time codes that let you log in if you lose your MFA device. Keep them somewhere safe, like printed in a safe place, and never share them. A trusted adult can help with recovery.

Part of: ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 43

Understanding Backup codes and account recovery in ACARA Digital Technologies Years 7–8

What it does: Setting the value to False shows the rule that backup codes are never shared, because anyone with a code could log in as you. Backup codes are one-time codes made for the day you lose your MFA device. They let you get back into your account. A trusted adult can help you follow the official recovery steps for the account. A stranger could be an attacker. Save backup codes when you get them. If you wait until you are locked out, it is too late to find them. Printing the codes and locking them away keeps them available to you and hidden from other people.

Common mistakes: Backup codes must stay private. Anyone who has them can get into your account, so it should be private = True. If you lose your MFA device, you log in with a backup code. A Wi-Fi password cannot replace the MFA step. It should be use(backup_code).

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Backup codes and account recovery to a class →

This module's key terms are also in a printable crossword (Modules 674–695) and word search (Modules 635–695).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

You lose your phone that holds your MFA app. What can you use to still log in?

Ask a friend to guess your passwordA backup code you saved earlier

Matches

send_backup_codes(to="friend")

↓

Backup codes were sent to a friend. Codes must stay private, because anyone who has them can get into the account.

Applying

Meanings

Term

backup codes

Meaning

One-time codes that let you log in if you lose your MFA device. Keep them somewhere safe, like printed in a safe place, and never share them. A trusted adult can help with recovery.

Practice

SET backupCodes TO printed list of codes

Testing

Gaps

IF deviceLost THEN login()

Check Answer

Spots

3store(codes, "safe place")

4private = False

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. You lose your phone that holds your MFA app. What can you use to still log in?

A. Ask a friend to guess your password

B. A backup code you saved earlier ✓

Backup codes are one-time codes made for the day you lose your MFA device. They let you get back into your account.

2. Where is the safest place to keep your backup codes?

A. Printed and stored in a safe place at home ✓

B. In a post on your social media page

Backup codes must be kept somewhere safe and private. Anyone who finds them could use them to log in as you.

3. A person online says they work for the app and asks for one of your backup codes. What do you do?

A. Send the code so they can help you

B. Never share it and tell a trusted adult ✓

Backup codes are private, just like passwords. Real companies never need you to share them. Asking for one is a sign of a scam.

4. Which statement about backup codes is true?

A. Each code can only be used one time ✓

B. Each code works again and again

Backup codes are one-time codes. Once a code is used it stops working, so keep the unused ones safe.

5. You are locked out of your account and have no backup codes. Who can help you start account recovery?

A. A trusted adult, such as a parent or teacher ✓

B. A stranger from a chat group

A trusted adult can help you follow the official recovery steps for the account. A stranger could be an attacker.

Match the Pairs

backup codes → One-time codes that let you log in to your account if you lose the device you use for MFA

print and store in a safe place → A safe way to keep backup codes so you can find them later but others cannot

Backup codes are private, so you never share them with friends or strangers, or type them into a link from a message → share_backup_codes = False

If you lose your phone and can't get an MFA code, you use a backup code and ask a trusted adult to help with recovery → if lost_phone: use_backup_code(); ask_trusted_adult()

send_backup_codes(to="friend") → Backup codes were sent to a friend. Codes must stay private, because anyone who has them can get into the account.

save_backup_codes("screenshot_on_phone") → The codes are stored on the same phone used for MFA. If the phone is lost, the codes are lost too, so keep them printed somewhere safe.

Key Term

backup codes

One-time codes that let you log in if you lose your MFA device. Keep them somewhere safe, like printed in a safe place, and never share them. A trusted adult can help with recovery.

Fill in the Blanks

1. IF deviceLost THEN login(backupCode)

Hint: Type the name of the one-time item you use to log in when your MFA device is lost.

2. shareCodes = false

Hint: Type the Boolean value that shows backup codes must never be shared with anyone.

3. usesPerCode = 1

Hint: Type the number of times each backup code can be used.

4. IF allCodesLost THEN ask(trustedAdult)

Hint: Type the variable name for the person you should ask for help with account recovery.

5. print(backupCodes) storeSafely(paperCopy)

Hint: Type the function name that makes a paper copy of the codes, which is then stored safely.

Spot the Error

Question 1

A codes = make_backup_codes(10)

B print(codes)

C store(codes, "safe place")

D private = False

Line D — Backup codes must stay private. Anyone who has them can get into your account, so it should be private = True.

Question 2

A lost_phone = True

B if lost_phone:

C use(wifi_password)

D log_in()

Line C — If you lose your MFA device, you log in with a backup code. A Wi-Fi password cannot replace the MFA step. It should be use(backup_code).

Question 3

A code = "4821 7730"

B log_in(code)

C used = True

D reuse_next_time(code)

Line D — A backup code works only once. After using it you should cross it off (cross_off(code)), not plan to use it again.

Question 4

A codes = get_backup_codes()

B post_online(codes)

C put_in("safe drawer")

Line B — Posting codes online lets strangers see them. You should print them (print_page(codes)) and keep the page somewhere safe.

Question 5

A if lost_device:

B tell("trusted adult")

C send_codes_to_stranger()

D log_in()

Line C — Backup codes must never be shared with strangers. Recovery should be done with the help of a trusted adult: adult.helps_recover().

Student with a class code? Join your class →