Backup codes are held in the store: https://github.com/search?q=repo%3Aedge%2Faccount%20%27backupCodes%27&type=code This seems excessive and should be investigated as a candidate for refactoring.