[adamckay]

Backup codes can be generated at setup and displayed to the user (and never displayed again) which can log you in so you can reset your MFA device.

Google does this.