Hacked Accounts and Recovery

Recovering an Account When You Lose Your Phone

Lost the phone that receives your sign-in codes? Learn how to regain access using backup codes, other devices and recovery requests, and how to protect accounts meanwhile.

On this page
  1. Two problems at once
  2. Step 1: Protect the lost device
  3. Step 2: Get a replacement and restore what you can
  4. Step 3: Regain your second step
  5. Step 4: Use recovery options when nothing else works
  6. Step 5: Re-secure everything
  7. Prevent the next scramble

Two problems at once

Losing a phone creates two separate problems. The first is security: someone else may hold a device that opens your email, messages and apps. The second is access: you may not be able to receive the codes or approvals that your accounts need before they let you in. It is wise to deal with them in that order, starting by protecting what you can.

This page gives general principles. Phones and services differ, and screens change, so look for the described options rather than exact menu names.

Step 1: Protect the lost device

If you think the phone is lost or stolen rather than just misplaced at home:

  • Use another device or computer to find it. Lost phone tracking tools from your phone’s maker can show a location, play a sound, lock the screen, or erase the data remotely. Do not go to retrieve a stolen phone alone; contact local police.
  • Lock the phone remotely and display a contact message if the tool allows.
  • Contact your mobile carrier. They can suspend service and issue a replacement SIM with the same number. This also reduces SIM swap fraud risk if someone tries to use your number for codes.
  • Change the password on your main email and device account, since a thief with an unlocked phone may reach them. If the phone has a strong screen lock, you have more time, but do not rely on it. The comparison of phone screen locks explains why a strong lock helps in situations like this.

Smartphone security habits, such as a long PIN and encrypted storage, make this stage far less worrying.

Step 2: Get a replacement and restore what you can

Once the phone is locked, get the number back with a replacement SIM or eSIM from your carrier. Many services send codes by text, so reclaiming the number is often the key to getting back in. Then set up a new phone and sign in to your device account. Backups of settings, contacts and photos may restore much of your data; the article on backing up phone photos and messages explains the reasoning behind keeping one.

Step 3: Regain your second step

How you recover depends on what your accounts used.

Text messages. After your number is restored on a new SIM, codes should arrive again. Some carriers need identification and may take time.

Authenticator apps. These apps often store the codes on the phone. Some let you sync or export codes to a new device, but only if you enabled that beforehand. If not, you will need another route, usually a backup code or recovery request. Compare verification code options before choosing one so you understand which are tied to a single device.

Backup codes. If you saved them, now is the time to use one. Each typically works once, so use it to sign in and set up your new second step immediately.

Security keys or passkeys. A hardware key kept at home may still work. Passkeys that sync across devices can sometimes be reached from a computer or tablet that is still signed in.

Another signed-in device. A tablet or laptop that is already trusted can often approve a new device or change the setup. Look for “other ways to sign in” or “try another way.”

Step 4: Use recovery options when nothing else works

If you cannot use any second step, the service may offer a recovery request. This usually involves verifying through a backup email address or a mix of details about the account and your usual device. The wait can be days, and results are not guaranteed. The explanation of how recovery requests work covers what is typically asked and how to improve your chances.

Some services deliberately impose a waiting period, particularly for accounts that hold financial or sensitive data. This is frustrating, but it protects you from an attacker who has your stolen phone.

Step 5: Re-secure everything

Once you are back in:

  1. Remove the lost device from the list of trusted devices on each key account.
  2. Sign out sessions you do not recognize.
  3. Set up two-step sign-in again using your new phone, and consider a method that is not limited to one device.
  4. Save a new set of backup codes and discard the old ones.
  5. Review banking and payment apps for unfamiliar activity; transaction alerts help.

Banking apps often need re-registration on the new phone. Contact the bank through its official channels if you have problems. Be wary of messages that claim to help you, since text message scams exploit exactly this moment.

Prevent the next scramble

You can make the next lost phone far less troublesome by preparing now. Keep backup codes somewhere safe, register a second device or security key, and keep your recovery email and number up to date. That groundwork is covered in preparing recovery options before you need them. Regular backups also mean losing the device does not mean losing the contents.

The complete guide to hacked accounts and recovery

What to Do First When an Account Is Hacked
Read the guide

Keep exploring

Guides from other topics

All topics →