Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

What is the point of the admin "Create a recovery code" endpoint? I am not sure how to use the recovery code once I have created it. Is it supposed to be somehow used with the self-service recovery flow? <https://www.ory.sh/docs/kratos/reference/api#tag/identity/operation/createRecoveryCodeForIdentity>

The response from the endpoint should contain a `recovery_link`. You can open the link and enter the `recovery_code` in the resulting field.

Use-cases can be:
• a user of yours asks you to have their password reset, because they don’t have access to the email address they used when registering their account. Just make sure, that the person contacting you is actually the person that owns the account.