RecoveryCodes
Inventories accounts, authenticators, and recovery codes outside the IdP and maps which devices protect each account with reverse lookups and coverage reporting
The product is an inventory for accounts, authenticators, and recovery codes that exist outside federated identity providers, mapping root accounts, registrars, banks, and vendor portals to the devices and codes that protect them and showing coverage gaps and single-device risks. It sells to IT, operations, and executive buyers in business-to-business organizations that need audit evidence for accounts not covered by Okta or Entra. It is positioned as the complement to identity providers and password vaults, which do not map authenticators to accounts or provide reverse lookups and recovery code governance.
Key features
- Unlimited accounts, authenticators, and assignments
- 2 MFA devices per domain default
- Status: protected, one device risk, no 2FA
- Record upstream IdPs and SSO chains
- Store recovery codes without TOTP seeds
- Share selected domains with members
- Step-up authentication for code reveals
- Audit logging for code access
- Reverse lookup accounts per authenticator
- Personal and shared authenticators
- MFA coverage report
- One device risk report
- Offboarding attestation report
- Access and change log
- Envelope encryption per code
- No social media activity detected
- No GTM activity detected
- IT teams
- Security teams
- Operations teams