A lost phone can feel like losing every key you own. Stay calm, because there is nearly always a way back in. This guide is part of our two-factor login and passkeys guide.

First: protect the phone itself

  1. Use Find My (Apple) or Find Hub (Google) from another device to locate, lock or erase the phone.
  2. Call your mobile provider to suspend the SIM, which guards against misuse of your number.
  3. Change your email password if the phone was stolen rather than lost.

Our guide to securing your phone covers how to prepare in advance.

Getting back in, in order of ease

OptionWhen it works
Backup codesIf you saved them
Another logged-in deviceIf a tablet or computer is still trusted
Second key or passkeyIf you registered one
Authenticator backupIf your app syncs or you exported it
SMS or email fallbackIf your number or inbox still works
Official account recoveryThe last resort, slower

Using backup codes

At the login screen, after your password, look for "try another way" or "use a recovery code". Enter one code. Once you are in:

  1. Remove the lost phone from your account.
  2. Set up two-factor login on your new phone.
  3. Generate fresh backup codes.

If you have no backup at all

Go to each service's official recovery page, by typing the address yourself. You may be asked to prove who you are with a known device, a known location or ID. It can take days, and that delay protects you.

Start with your email account, because other resets depend on it. Then fix your password manager, and then move on to everything else.

Prepare for next time

  • Save backup codes for your key accounts.
  • Register a second factor, such as a security key.
  • Use an authenticator with a backup you trust.
  • Keep a list of which accounts use two-factor login.

If you suspect someone used your phone to get into accounts, follow the signs your account has been hacked.