Reviewed guide | 2026-10-12
Where to keep passkey backups and recovery codes: a storage plan for South African users
Passkeys and authenticator apps protect exchange accounts until the device holding them disappears. A practical plan for South African users on what to back up, where to store each item and how to test it.
Multiple exchanges | South Africa | ZAR | fees, access and account safety
Setting up a passkey or authenticator app takes a few minutes. Deciding what happens when the phone is stolen, broken or reset is the part most people skip. Phone theft is a real concern in South Africa, and a stolen phone often carries the only copy of every security key a person owns. The result is a long recovery process with each exchange at the worst possible moment. A storage plan solves this in advance. It lists which credentials exist, where the backup of each one lives, and how often you confirm that the backups still work.
List what needs a backup
Start with an inventory. For each exchange you use, such as Binance, OKX, Bybit or Bitget, note the sign-in method: passkey, authenticator app, SMS or a combination. Then note any recovery codes the exchange provided when you enabled two-step verification. Add the email account linked to each exchange, since it is part of recovery too. This list is the backbone of the plan and should itself be stored safely, without passwords written on it.
Use two places, not one
Passkeys synced through a password manager survive the loss of one phone, provided you can sign in to that manager from another device. Make sure that account has its own strong protection and recovery method. For authenticator apps, enable an encrypted backup if the app offers one, or register a second device. Recovery codes belong on paper, kept in two separate physical places at home or with a trusted family member, never in a photo on the same phone.
Avoid storage that defeats the purpose
Do not store recovery codes in email drafts, cloud notes or chat messages to yourself. If someone gains access to your email, they then have both the account and the means to undo its protection. Do not keep everything on a single device, even a secure one. The plan works only if losing one item never removes every route back into your accounts.
Test the plan twice a year
Twice a year, choose one exchange and sign in using the backup route instead of your usual device: the second passkey, the restored authenticator or a recovery code if the exchange allows a test. Confirm the paper copies are readable and still where you left them. Update the inventory when you add or close an account. A plan that has been tested is the difference between an annoying afternoon and weeks of locked funds.
Risk boundary: South Africa Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- List every exchange, its sign-in method, its recovery codes and the linked email account.
- Keep a synced passkey or second authenticator device in addition to your main phone.
- Store paper recovery codes in two separate places and never as photos on the same phone.
- Sign in through the backup route on one exchange twice a year to prove the plan works.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.