Backup codes: regenerate any time, and they survive adding an authenticator

One set of backup codes covers every way you sign in, whether you use a passkey, an authenticator app, or both.

• Regenerate backup codes is now available in Settings → Security, including for accounts that only use a passkey. Replacing the set invalidates the old codes immediately and needs a fresh confirmation from you.
• Adding an authenticator app no longer replaces your codes. If your account already has backup codes, they stay valid and the setup screen says so. Before this change, enabling an authenticator app generated a new set and silently invalidated the one you had saved.