From ec12f63272dcd391af47dc4fe7c32135decd0a6a Mon Sep 17 00:00:00 2001
From: mbecker20 <becker.maxh@gmail.com>
Date: Sun, 7 Dec 2025 14:29:36 -0800
Subject: [PATCH] double recovery code length

---
 bin/core/src/api/user.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/core/src/api/user.rs b/bin/core/src/api/user.rs
index ef09646c8..6645e9e39 100644
--- a/bin/core/src/api/user.rs
+++ b/bin/core/src/api/user.rs
@@ -302,7 +302,7 @@ impl Resolve<UserArgs> for ConfirmTotpEnrollment {
     }
 
     let recovery_codes =
-      (0..10).map(|_| random_string(10)).collect::<Vec<_>>();
+      (0..10).map(|_| random_string(20)).collect::<Vec<_>>();
     let hashed_recovery_codes = recovery_codes
       .iter()
       .map(|code| hash_password(code))