What it means
An authenticator app produces a changing code after its secret has been enrolled with Discord. A backup code is a recovery credential you save when MFA is configured and use if the normal method is unavailable. They are different secrets and should not be stored only on the same phone. Discord also supports passkeys and security keys for some MFA flows. The best combination is a tested everyday method and an independent recovery route.
A real-world example
A member trades in an old phone, assumes the Discord account will transfer automatically, and discovers the new authenticator has no enrolled Discord entry. An unused backup code stored in a password manager on another device can make a fresh sign-in possible; a screenshot kept only on the traded phone cannot.
What to do
Enable MFA through Discord's account settings, confirm enrollment, save backup codes securely, and test a sign-in before resetting the old device. If you regenerate codes, replace the old saved set. Never give any code to support impersonators or bots.
The distinction that matters
An authenticator code is short-lived, whereas a backup code is a fallback that may be single-use. Neither proves an unsolicited QR login is safe to approve. Losing every enrolled method and backup code can leave the account unrecoverable; Discord Support says it cannot simply disable MFA for you. Protect the linked email independently, because its own compromise may create a second account-recovery problem. Keep the recovery copy available but protected from anyone who gains access to a shared computer.
Discord MFA methods and backup codes
