ACCOUNT RECOVERY
Account Recovery Checklist Before You Need It
Prepare backup factors, recovery codes and trusted-device access before a lost phone or forgotten password.
Account recovery works best when prepared in advance. Waiting until a phone is lost or a password is forgotten leaves fewer trusted signals. A 20-minute review of your most important accounts can prevent days of support requests and reduce the chance of permanent lockout.
Identify critical accounts
Start with primary email, password manager, Apple or Google account, banking, cloud storage, work systems and main social accounts. These often unlock everything else. Record the service names and enabled recovery methods, but never place passwords or OTPs in an unsecured document.
Add independent recovery methods
Register a passkey, security key or authenticator and a separate backup. Save one-time recovery codes offline. Confirm the recovery email and phone number are current and controlled only by you. Remove old work addresses, expired numbers and devices you no longer own.
Test without creating risk
Use the service’s security check-up and confirm that backup methods are recognised. Do not intentionally lock yourself out. Keep one trusted session active while validating a second device. Review login alerts, active sessions and recent security events.
Plan for family or business continuity
For shared responsibilities, use official family, team or delegated-access features rather than sharing passwords. Document where recovery instructions are stored and who can access them in an emergency. Review the plan after changing a phone, SIM, employer or primary email.
Quick checklist
- List critical accounts
- Add two independent factors
- Store recovery codes offline
- Remove obsolete details
- Review after every device change
Frequently asked questions
Where should recovery codes be stored?
Use a secure password manager, locked physical storage or another protected location separate from the main device.
Should family members know my password?
Prefer official emergency-access or delegated-account features over sharing passwords.