Lost phone and account recovery#

Set this up before you need it#

Recovery needs two things you must set up while you still have access:

1. A verified phone number. Go to Account → Phone number, enter your number, and type the code you receive by text message.
2. Recovery codes. Go to Account → Recovery codes and tap Create recovery codes. You get 10 one-time codes, shown once. Write them down or save them in a password manager, somewhere other than your phone.

Creating new codes cancels the old ones.

If you still know your password#

You don't need recovery. Sign in on the new phone with your email and password, then add a passkey on that phone (Account → Add passkey).

Your old phone keeps receiving requests until you remove it under Account → Devices that get requests.

If you can't sign in#

You need both your verified phone number (a SIM that receives texts to it) and one unused recovery code.

1. On the sign-in screen, tap Lost access?
2. Enter your email and your verified phone number. If they match, a code arrives by text message. For privacy, the screen looks the same whether or not they matched.
3. Enter the text-message code, one recovery code, and a new password.

When this succeeds:

• you are signed in
• every passkey, device and session on the account is removed, so a lost or stolen phone is cut off
• requests that were waiting are cancelled
• that recovery code is used up; the screen tells you how many are left

Then add a passkey on your new phone and turn notifications back on.

Limits#

• The text-message code is valid for 10 minutes and allows 5 attempts.
• Recovery can be started at most 5 times per hour.

If you have neither#

Without your password, a verified phone and a recovery code, the account can't be recovered. This is deliberate: anyone able to recover it another way could take it over. Your agents stay under your control only as long as you keep one of these.