RecoveryCodes is a SaaS inventory tool that maps multi-factor authentication (MFA) dependencies across accounts, authenticators, and recovery codes outside an identity provider. It helps organizations know which business-critical services depend on a specific phone or security key before it is lost or decommissioned.
Key features:
- Account & Authenticator Inventory – Unlimited accounts, authenticators, and assignments with status labels for protected, one-device risk, or no 2FA.
- Reverse Lookup – Instantly see every account protected by a given authenticator when replacing or retiring a device.
- Recovery Code Storage – Securely store recovery codes per domain with step-up authentication and audit logging, without holding TOTP seeds.
- Audit & Export Evidence – Generate MFA coverage reports, offboarding attestations, and access logs that support ISO 27001 reviews.
Targeted at security teams, IT admins, and compliance officers who need visibility and continuity for MFA outside their IdP.
