You could force a download as a .txt file alongside displaying them, that way you really can't say "Oh, I didn't know that was important". A lot of websites require you to download the recovery codes before letting you enable 2fa

Did try adding a download button, although it may be a bit more work than expected.

I am not 100% sure about forcing a file download yet, I shall see.

Will add a download codes buttons too, was told it was fine to do it the way i originally thought would not be effective.

I have a download button now, it does work although the only potential issue would be that you can just send a post request manually at any point and so long as you are authorized on the account you will get the 2fa codes without the need to reset.

I am unsure if that's going to be an issue or not since right now you can just quickly view them again by generating new ones, and it's not like it asks for a password or anything like discord does in either case.