If you forget your code, you turn off two-step verification through an email address registered with the app. Users who forget their passcode and don't register an email address will still be able ...