What it means
An authenticator app produces a short-lived code for ordinary Reddit sign-ins after the password. A backup code is a one-time fallback for when the app is unavailable. Reddit currently provides ten backup codes through desktop web account settings and says generating a new set invalidates the prior set. Both are sensitive because they can complete a sign-in when combined with the other required credentials.
A real-world example
A user replaces a phone and discovers the authenticator was not transferred. Their saved Reddit backup code gets them in once; they then enroll the new authenticator and refresh their recovery codes. An old screenshot of a previously regenerated set would fail.
What to do
Save current backup codes in a password manager or secure offline location before changing phones. Test the new authenticator from a fresh browser while the old phone still works. Mark a used backup code as spent and replace outdated sets everywhere you stored them.
The distinction that matters
A backup code is not a password reset, and an email reset may not bypass the missing second factor. Do not send either kind of code to a person in chat, even if they claim to be support. App migration and Reddit's own account recovery are separate steps.
Reddit backup codes Reddit 2FA setup
