Recovery app
The Super Admin's way in. Sign in here, then open the Super Admin console, or put the platform on an older or newer version when an update broke it. Nothing in the data is undone.
Sign in
Or with the phone code
Use a recovery code
Only when the phone and the passkey are both lost. Each code works once.
Set up your sign-in
1. Phone code
Add this key to your authenticator app, then type the code it shows. The recovery app asks for it for every version change.
2. Passkey (recommended)
3. Finish
Your recovery codes
Write them down or print them now: they are shown only this once. Each code signs you in once when the phone and the passkey are both lost.
Open the Super Admin console
Opens the console in this browser with a one-time link that works for one minute.
1. Pick the versions
Loading what each Worker serves now…
2. Check what happens
3. Move
Type the code your authenticator app shows now. A new code is needed for every move.
This recovery app
Loading…
Version history
Loading…
Your sign-in
Make new recovery codes
The old codes stop working.
Recover the platform's keys
Use this when SETTINGS_KEY, ADMIN_SEAL_KEY or DEVICE_KEY is lost and the Super Admin console cannot start. Your recovery password opens the encrypted copies here, in this browser; it is never sent. You get an encrypted key backup file for your terminal, or the values for the Cloudflare dashboard. Without the recovery password nothing can be opened.
Open files from your computer
When this page cannot check your phone code: in the Cloudflare dashboard (R2, the backups bucket, else the audit bucket) download the files under escrow/ (with escrow/recovery/), pick them here and type the recovery password above.