Backup codes and account recovery

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. You lose your phone that holds your MFA app. What can you use to still log in?

A Ask a friend to guess your password

B A backup code you saved earlier

2. Where is the safest place to keep your backup codes?

A Printed and stored in a safe place at home

B In a post on your social media page

3. A person online says they work for the app and asks for one of your backup codes. What do you do?

A Send the code so they can help you

B Never share it and tell a trusted adult

4. Which statement about backup codes is true?

A Each code can only be used one time

B Each code works again and again

5. You are locked out of your account and have no backup codes. Who can help you start account recovery?

A A trusted adult, such as a parent or teacher

B A stranger from a chat group

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1backup codes		AOne-time codes that let you log in to your account if you lose the device you use for MFA
2print and store in a safe place		Bif lost_phone: use_backup_code(); ask_trusted_adult()
3Backup codes are private, so you never share them with friends or strangers, or type them into a link from a message		Cshare_backup_codes = False
4If you lose your phone and can't get an MFA code, you use a backup code and ask a trusted adult to help with recovery		DBackup codes were sent to a friend. Codes must stay private, because anyone who has them can get into the account.
5send_backup_codes(to="friend")		EThe codes are stored on the same phone used for MFA. If the phone is lost, the codes are lost too, so keep them printed somewhere safe.
6save_backup_codes("screenshot_on_phone")		FA safe way to keep backup codes so you can find them later but others cannot

Definitions

backup codes

Fill in the Blanks

Complete each line of code by filling in the missing parts.

IF deviceLost THEN login(__________)

shareCodes = _____

usesPerCode = _

IF allCodesLost THEN ask(____________)

_____(backupCodes) storeSafely(paperCopy)

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A codes = make_backup_codes(10)

B print(codes)

C store(codes, "safe place")

D private = False

Question 2

A lost_phone = True

B if lost_phone:

C use(wifi_password)

D log_in()

Question 3

A code = "4821 7730"

B log_in(code)

C used = True

D reuse_next_time(code)

Question 4

A codes = get_backup_codes()

B post_online(codes)

C put_in("safe drawer")

Question 5

A if lost_device:

B tell("trusted adult")

C send_codes_to_stranger()

D log_in()

Answer Key

Backup codes and account recovery

Section A: Quick Questions

B — A backup code you saved earlier

A — Printed and stored in a safe place at home

B — Never share it and tell a trusted adult

A — Each code can only be used one time

A — A trusted adult, such as a parent or teacher

Section B: Match the Pairs

backup codes → One-time codes that let you log in to your account if you lose the device you use for MFA

print and store in a safe place → A safe way to keep backup codes so you can find them later but others cannot

Backup codes are private, so you never share them with friends or strangers, or type them into a link from a message → share_backup_codes = False

If you lose your phone and can't get an MFA code, you use a backup code and ask a trusted adult to help with recovery → if lost_phone: use_backup_code(); ask_trusted_adult()

send_backup_codes(to="friend") → Backup codes were sent to a friend. Codes must stay private, because anyone who has them can get into the account.

save_backup_codes("screenshot_on_phone") → The codes are stored on the same phone used for MFA. If the phone is lost, the codes are lost too, so keep them printed somewhere safe.

Section C: Definitions

backup codes — One-time codes that let you log in if you lose your MFA device. Keep them somewhere safe, like printed in a safe place, and never share them. A trusted adult can help with recovery.

Section D: Fill in the Blanks

IF deviceLost THEN login(backupCode)

shareCodes = false

usesPerCode = 1

IF allCodesLost THEN ask(trustedAdult)

print(backupCodes)
storeSafely(paperCopy)

Section E: Spot the Error

D — Backup codes must stay private. Anyone who has them can get into your account, so it should be private = True.

C — If you lose your MFA device, you log in with a backup code. A Wi-Fi password cannot replace the MFA step. It should be use(backup_code).

D — A backup code works only once. After using it you should cross it off (cross_off(code)), not plan to use it again.

B — Posting codes online lets strangers see them. You should print them (print_page(codes)) and keep the page somewhere safe.

C — Backup codes must never be shared with strangers. Recovery should be done with the help of a trusted adult: adult.helps_recover().