Building a phone recovery plan: existing authentication factors
Existing authentication factors: You may be unable to generate required one-time codes. Before building a phone recovery plan, record the current authentication setup so the change cannot accidentally remove every reliable sign-in path.
Building a phone recovery plan: the first access risk
Losing an authenticator may lock you out of accounts that depend on it. Recovery is safest when you prepared backup codes, another authenticator or a recovery method in advance.
Recovery methods to prove before building a phone recovery plan
Each service falls back to its own recovery process.
Building a phone recovery plan: backup factors and trusted devices
Backup factors and trusted devices: Account data is not by itself deleted; access is the immediate problem. Protect backup codes and trusted-device access separately so one lost device cannot remove both the primary factor and the fallback.
Review active sessions before building a phone recovery plan
Billing can continue even while you are locked out. Use building a phone recovery plan to audit connected access: record the sessions that should remain, remove stale ones, and recheck integrations afterward.
Final recovery test for building a phone recovery plan
Other people generally see no public change. Finish building a phone recovery plan with a clean-session login test and a fallback-recovery test so both normal access and recovery are proven.
Run a short recovery drill while the phone is still available
Choose two important accounts and simulate the first steps you would take if the phone disappeared. Confirm a second device or browser can reach the recovery page, locate backup codes or a passkey on another device, and verify the recovery email. Do not complete a destructive reset; the purpose is to discover missing dependencies while the primary phone still works. Update the plan immediately if any recovery method points back to the same device you are trying to prepare for losing.
Related consequence reports for “How to build a recovery plan before you lose your phone”
- What happens if you lose access to your authenticator app?Security & 2FA
- What happens if you lose your backup codes?Security & 2FA
- What happens if your phone number is SIM-swapped?Security & 2FA
- What happens if you lose the phone that has your Google passkeys?Security & 2FA
- What happens if your phone is lost with WhatsApp logged in?Security & 2FA
- What happens if you lose access to your WhatsApp passkey device?Security & 2FA
Continue in this topic
Find more distinct decisions and source-backed consequence reports in the Security & 2FA topic hub.
Official sources for “How to build a recovery plan before you lose your phone”
- NIST — Digital Identity Guidelines: AuthenticationOfficial source ↗
- FTC — Use two-factor authenticationOfficial source ↗
- FTC — SIM swap scamsOfficial source ↗
- Google — PasskeysOfficial source ↗
- FTC — Before you upgrade your phoneOfficial source ↗
- WhatsApp Help — Account deactivationOfficial source ↗
- WhatsApp Help — Change phonesOfficial source ↗
- WhatsApp Help — PasskeysOfficial source ↗