BLOG

Authenticator apps, SMS codes and passkeys: what happens when a device is lost?

Confirm that another trusted device or recovery path can complete sign-in before you retire the existing credential.

What protects the account before losing a device used for authentication

Inventory the factors protecting the account before losing a device used for authentication; keep one independent method available while losing a device used for authentication is in progress.

What can break first with losing a device used for authentication

Confirm that another trusted device or recovery path can complete sign-in before you retire the existing credential.

Keep a recovery path through losing a device used for authentication

Do not rely on an untested fallback during losing a device used for authentication; complete a recovery check now and preserve an independent method afterward.

Protect recovery material before losing a device used for authentication

Account data is not automatically deleted; access is the immediate problem. SMS codes and passkeys, keep one independent recovery route working. Store backup codes or recovery material away from the primary device before losing a device used for authentication; confirm a trusted device still appears where you expect it.

Losing a device used for authentication: connected sessions and dependencies

SMS codes and passkeys: what happens when a device is lost, billing can continue even while you are locked out. SMS codes and passkeys, check recovery contacts for stale details.

Losing a device used for authentication: verify sign-in from a clean session

Other people normally see no public change. Before finalising the lost-device authentication plan, try a signed-out or second-device recovery check. SMS codes and passkeys, store recovery material outside the browser. Finish losing a device used for authentication with a clean-session login test and a fallback-recovery test so both normal access and recovery are proven.

Related consequence reports for “Authenticator apps, SMS codes and passkeys: what happens when a device is lost?”

Continue in this topic

Find more distinct decisions and source-backed consequence reports in the Security & 2FA topic hub.

Official sources for “Authenticator apps, SMS codes and passkeys: what happens when a device is lost?”

EDITORIAL STANDARD

Evidence and editorial boundary: Authenticator apps, SMS codes and passkeys: what happens when a device is lost

For “Authenticator apps, SMS codes and passkeys: what happens when a device is lost?”, service-specific claims are tied to the official sources above; account-level dates, warnings and eligibility shown by NIST take precedence.

Read our editorial policy →
Related blogs

Authenticator apps, SMS codes and passkeys: what happens when a device is lost? — continue with a related decision

UPDATEDSecurity & 2FA

How to build a recovery plan before you lose your phone

648 wordsRead blog →
UPDATEDSecurity & 2FA

SIM-swap risk: why your phone number is a security credential

597 wordsRead blog →
UPDATEDSecurity & 2FA

The no-panic guide to a lost phone

669 wordsRead blog →