They are the only key to your mailbox if the password is lost. We cannot restore access any other way — and that is deliberate.
At registration you receive a set of one-time codes. Each works once and lets you set a new password.
They are shown exactly once. We store only their hash — we could not read your codes even if we wanted to.
While you still have access, a new set is issued from your account — the old codes stop working at that moment. With neither access nor codes, what remains is a support request with control questions about the mailbox; that takes longer and does not always succeed.