What’s a best practice to save users backup codes for password reset?

My idea was: save hashes of the codes in an array on the database and when one gets used I just remove the hash

Sign in to participate in the conversation

Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.