What this site is
ReKey is a free recovery code generator. It produces sets of random, backup-code-style strings — numeric, alphanumeric, grouped or continuous — that you can copy or download for testing two-factor authentication flows, writing documentation and tutorials, and creating demo data. The entire tool is static HTML, CSS and JavaScript: no backend, no database, no accounts.
What this site is not
ReKey is not a security product and does not issue real recovery codes. Real 2FA backup codes are generated by each service itself when you enable two-factor authentication, and only those codes can recover an account. The strings this site generates are random data with no link to any account, and they will be rejected by any real login form. This limitation is stated on the tool page and repeated throughout the guides — it is the foundation the whole site is built on.
Why it is built this way
- Private by architecture. Everything runs in your browser via crypto.getRandomValues(). There is no server to trust because there is no server involved.
- Free with no catch. No sign-up walls, no usage tiers, no "pro" upsell. A code generator does not need your email address.
- Honest by default. The tool page carries an explicit limits box: what the codes are for, and what they must never be used for. The guides explain how real backup codes work so nobody confuses the two.
The guides
Alongside the generator, the site publishes short practical guides: what recovery codes are, how to store real backup codes safely, the formats services use, and legitimate use cases for generated codes. They are written to be accurate about how two-factor authentication works, without invented statistics or claims.
Try the generator
Free, private, no sign-up. Generate your first set in one click.
Open the generator