I think then having this "backup/recovery code" module to be enable if one (or more) MFA methods are enabled... Makes complete sense

This might make T150601: Add option to generate new set of scratch codes easier too

One problem, the current database structure only allows one set of 2fa credentials per user.... :(

id int(11) PK

where id is user_id

We have a decent size blob we can use though...

In T232336#5476334, @TheDJ wrote:

One problem, the current database structure only allows one set of 2fa credentials per user.... :(
id int(11) PK
where id is user_id

I do wonder if we can drop the module column, and just have that as part of the data....