Lost Your Phone with Your 2FA Codes? How to Get Back Into Your Accounts

Losing the phone that holds your authenticator codes feels like being locked out of your whole digital life. Usually you aren't. Most services planned for exactly this, and with some patience you can get back into every account. Here's the order to work through, followed by how to make sure it never turns into a crisis again.

First, deal with the phone itself

If the phone was lost or stolen rather than reset, protect it before you worry about codes:

• Use Find My from another Apple device or from iCloud.com to locate the phone, mark it as lost or erase it remotely.
• Ask your carrier to suspend the SIM so nobody else receives your texts and calls, including SMS codes.
• If you think someone may know your passcode, change the passwords for your main email and Apple Account from another device as soon as you can.

A locked iPhone is hard to get into, and an authenticator locked with Face ID keeps the codes private even if someone gets past the lock screen.

Why the codes don't just come back

Authenticator codes are generated from secrets stored on the device. Ring keeps those secrets encrypted on your iPhone only, with no copy on a server, and that's the point: nobody else holds them. The flip side is that a new or reset phone starts empty, and the old codes can't be downloaded from anywhere.

So recovery happens on each service's side, not in the app. You prove to the service that the account is yours, it removes the old authenticator, and you set up a new one. Go through the options below for each account, starting with your main email, because it's usually the key to resetting everything else.

Use your recovery codes

When you turned on 2FA, most services offered a set of one-time backup codes. If you saved them, this is the fastest path:

1. Go to the login page and enter your password as usual.
2. On the 2FA screen, look for an option to use a backup code or try another method.
3. Enter one of the saved codes. Each one works only once, so cross it off afterwards.

Once you're in, go straight to the security settings, remove the old authenticator and generate a fresh set of recovery codes.

Use a device that's still signed in

Your laptop, tablet or work computer may still be logged in to many of your accounts. An open session often lets you reach the security settings directly, and from there you can switch 2FA to your new phone. Some services ask for your password again before changing security settings, but not always for a second factor.

Some ecosystems also treat a signed-in device as a second factor in its own right. Another Apple device signed in to the same Apple Account can receive verification codes for it, and Google can send sign-in prompts to other phones or tablets where you're logged in to your Google Account.

Try another second factor

If you added a backup method when you set up 2FA, now is the time to use it: a hardware security key, a trusted phone number for SMS, or a second authenticator on another device. On the 2FA screen, look for a link to choose a different method.

Go through account recovery

When none of that works, most large services have an account recovery process. The details differ, but the pattern is similar:

• You're asked for information that helps prove ownership: a recovery email or phone number, a previous password, roughly when you created the account, or recent activity. Some services ask for an ID document.
• There may be a waiting period, sometimes several days. Apple, for example, says account recovery can take a few days or longer. The delay exists to give the real owner time to notice and stop a fraudulent request.
• Accuracy matters more than speed. Use a device and network you've used with the account before if you can, answer what you know, and follow the service's instructions instead of starting the process again and again.

Contact support

For services without self-service recovery, such as many smaller sites, crypto exchanges and some banks, contact support directly. Expect identity checks; that's a good sign, not an obstacle. For work accounts, your IT administrator can usually reset 2FA for you.

Be careful about who you talk to. Scammers target people in exactly this situation, posing as support agents. Only use contact details from the service's official website or app, and never share a one-time code or recovery code with anyone who contacts you first.

Set up the new phone properly

Each time you regain access to an account:

1. Remove the old authenticator or the lost device from the account's security settings.
2. Turn 2FA back on and scan the new QR code with the authenticator on your new phone.
3. Generate new recovery codes and store them away from the phone.
4. Review recent sign-ins and active sessions, and sign out anything you don't recognize, especially if the phone was stolen.

Make sure it never locks you out again

A lost phone should be an inconvenience, not an emergency. A few habits get you there:

• Save recovery codes for every account. Print them or write them down and keep them somewhere safe at home, separate from your phone. A password manager works too, as long as you can open it without that phone.
• Add a second method to important accounts. A hardware security key, a trusted phone number or another signed-in device. Our comparison of 2FA methods explains which backup suits which kind of account.
• Keep an inventory. A simple list of every account with 2FA turned on, the method it uses and where its recovery codes are. Folders in Ring help you see at a glance which accounts you've protected, but keep the list itself somewhere other than your phone.
• Switch phones deliberately. When you upgrade, set up 2FA for each account on the new phone while the old one still works, and wipe the old phone only after every account has moved.
• Check once a year. Pick a date, make sure you can still find your recovery codes and that your backup phone number is current.

If you're reading this before it happens

Spend ten minutes today: find or regenerate the recovery codes for your main email, your Apple Account and your password manager, and put them somewhere safe. If you're turning on 2FA for the first time, the setup guide covers saving recovery codes as part of the process.