You should generate your recovery code immediately after creating your Securesafe account. If you already have an account but never saved the code, you must generate a new one (which will invalidate any old, unsaved codes).

is a great place to find community-vetted tips on storing recovery codes safely. Do you need help generating a new code

Create a dedicated Securesafe account with no daily use. Store its Recovery Code in a sealed envelope in the CTO's office. This account can be given "Full Access" to all shared folders. In an emergency, that code can unlock the enterprise vault.