How i can generate Backup 2fa after user has been activated 2fa about twofactorauth

[RobThree]

You just generate some random strings/codes and store them with the useraccount. This is not something this library provides (you could use (part of) the output of the createSecret() method to generate some backup codes I guess).

[developing-off]

Ah okay can you show me a code how to do that ? i would generate 6 back up code

[RobThree]

Use a for-loop or something? The basics are:

1. Generate X-number of codes using createCode() or any other means to generate a random string (make sure you have a decent amount of entropy, I suggest at least 10 bytes)
2. Show codes to user
3. Store codes in database or file or whatever

This is all highly dependent on your code, your environment, everything. There's no "THE" way to do this, there's infinite ways to do this (some better than others, ofcourse). But please understand that github issues are not a support forum for general programming questions. You might want to try stackoverflow or similar sites for that.

[willpower232]

I would suggest using something like bin2hex(random_bytes(10)) to create the secrets and then use whatever password hashing algorithm from the framework in use to store them securely.

[developing-off]

okay thank you for your help