A recovery code works once. After successful recovery it is invalidated and a new code must be generated after sign-in.