New phone, old phone gone, and every login wants a code? How to get back in, account by account.
Involved⏱ 30–90 miniPhoneAndroidAny
Two-factor authentication is excellent protection — until the phone holding your codes is lost, broken, or wiped. Suddenly the extra step that keeps attackers out is keeping you out too.
The good news is that every major service has a recovery path. It is slower than a normal login, sometimes deliberately so, but with a methodical approach you can get everything back. Start with your email account, because most other recoveries depend on it.
Try these first — 30 seconds each
[ ]If the phone is lost rather than broken, use Find My (iPhone) or Find My Device (Android) from a computer to locate it, lock it, or erase it.
[ ]Contact your mobile carrier to block the SIM and order a replacement with the same number — text-message codes will then work again.
[ ]Search your password manager, email, and printed files for backup codes you may have saved when setting up two-factor.
The full fix
6 steps in the order that solves it fastest, plus platform notes, prevention, and when to call
in a pro — unlocks with a short ad.
1
Recover your main email account first
Google: go to the sign-in page and choose "Try another way" to see options such as a backup phone, recovery email, or backup codes. Apple ID: use iforgot.apple.com or another signed-in Apple device. Microsoft: use account.live.com/acsr for the recovery form. Answer from a device and location you have used before, which improves your chances.
2
Check whether your authenticator backed up
Google Authenticator can sync codes to your Google account, Microsoft Authenticator can back up to iCloud or a Microsoft account, and apps like Authy and 1Password sync automatically. Install the app on the new phone and sign in — your codes may reappear.
3
Use backup codes where you have them
Backup (recovery) codes are one-time passwords issued when you set up two-factor. Each can be used once. After logging in with one, immediately set up two-factor again on your new phone and save a fresh set of codes.
4
Go through each service's account recovery
For services with no backup, use the "Can't access your authenticator?" or "Lost your device?" link on the login page. Expect identity checks — confirming email, previous passwords, or recent activity — and waiting periods of a day or more. Do not use third-party "recovery services"; only use links on the official site.
5
Remove the old phone from your accounts
Once in, visit each account's security page and remove the lost device from trusted devices and sign out other sessions. This stops anyone who finds the phone from using saved logins.
6
Set up two-factor so this cannot happen again
Add at least two methods to each important account: an authenticator app that backs up, plus a backup phone number or a hardware security key. Store backup codes in your password manager or print them and keep them somewhere safe at home.
Platform notes
iPhone
Apple Account Recovery can take several days by design. Using the recovery process from one of your other Apple devices, or with a recovery contact you set up in advance, is much faster.
Android
Google prompts on a signed-in tablet or Chromebook can approve sign-ins even if your phone is gone. Check any other device where you are still signed in.
Stop it happening again
Use an authenticator app with cloud backup, or a password manager that stores two-factor codes.
Save backup codes the moment you enable two-factor.
Set up a recovery contact (Apple) or recovery email and phone (Google, Microsoft).
When to get professional help
If account recovery is refused for an important account such as banking, contact the company's support team by phone through the number on its official website or the back of your card. Never give codes or passwords to anyone who contacts you first.
This is general troubleshooting information for home users. Menus and settings differ between
device models and software versions. Back up important data before making changes, and contact
the manufacturer or an authorised repair provider for hardware faults or anything under
warranty.
🔓
Keep reading
Watch a short ad to unlock the full step-by-step fix — free, no account needed.
GlitchLantern