What to Do If You Lose Your Authenticator App

Try safe recovery routes

1. Check whether another device is already signed in.
2. Use a saved backup code.
3. Use a registered passkey or hardware security key.
4. Use a trusted recovery phone or email if the service offers it.
5. Open the service’s official account-recovery page.

If the phone is lost

Secure the phone and mobile number as well as the account. Mark the device lost through Find My or Find Hub, contact the mobile provider if the SIM is at risk and change the primary email password if necessary.

Expect deliberate delays

Strong recovery can take time because the provider must distinguish you from an attacker. Repeated guesses, conflicting information and newly created recovery details can make verification harder.

After regaining access

• remove the missing authenticator instance;
• review active sessions;
• change the password if exposure is possible;
• generate new backup codes;
• add a second recovery method;
• check for unauthorised changes.

Triage accounts by how many other services depend on them

Start with primary email, password manager, cloud account and mobile-provider account. Restoring those may unlock recovery for many lower-priority services.

• Check another signed-in device, app sync, backup codes, passkeys and hardware keys.
• Use each service’s official recovery page and keep reference numbers.
• Do not repeatedly guess codes or trigger account locks unnecessarily.
• After recovery, revoke the lost device and rebuild independent fallback methods.

If the phone was stolen, also block the SIM/eSIM and review sessions. Losing the authenticator can be part of a wider account-compromise event.