When you have two-factor access enabled on your account, and you lose access to your 2FA device, you may be able to recover your account using the following methods.
If you have misplaced the device that provided second-factor authentication, you can use the recovery codes generated when you enabled 2FA to access your account.
Locate the recovery codes generated that you have saved.
Enter an unused recovery code in the "Use a Recovery Code" prompt.
You are now logged into npm.
(Optional) To disable 2FA, see "Disabling 2FA".
Note: Once you regenerate a set of code, all previous recovery codes become invalid. Each code can be used only once.
On the account settings page, under "Two-Factor Authentication", click Modify 2FA.
Click "Manage Recovery Codes" to view your recovery codes.
Click "Regenerate Code" to generate a new set of codes.
If you have misplaced both your 2FA device and your recovery codes, you can contact our support team to attempt to recover your account. Provide as much information as possible to help us expedite the request faster.
Under the "Use a Recovery Code" form, click Try recovering your account.
If you have access to your registered email, enter the one-time password sent to your email in the One-Time Password field, then click Verify Email Address. If you do not have access to your registered email, select Skip email verification at the bottom of the form.
In the How can we help? section, select Reset my two-factor authentication (2FA).