Search guides

How to recover a locked account

We'll help you get back into a locked account by trying password reset, using backup codes, and following each service's recovery flow.

How-to · Accounts & access
15 min – several days
What you'll need
  • Access to your recovery email or phone (if possible)
  • Backup codes (if you saved them when enabling 2FA)
  • Government ID (some services require it for recovery)
Step 1 of 6

Quick triage — pick your path

Get started

Choose the option that matches what you see. You can jump straight to that section.

Show full guide

Steps

Goal: Get back into a locked account using password reset, backup codes, or the service’s recovery flow.

  • Identify which account is locked and what blocks you.
  • Good: You know the service and the blocker. Proceed to Gather what you have.
  • Bad: You are unsure. Check your email and notes for any recovery info.

Identify which account is locked

Goal: Know which service and what blocks you.

  • Note which service (email, bank, social) and what blocks you: forgotten password, lost 2FA device, or account suspended.
  • Check if you have access to the recovery email or phone on file.
  • Good: You have a clear picture. Proceed to Gather what you have.
  • Bad: You cannot remember the recovery email. Try the password reset flow—it may show a masked address.

Gather what you have

Goal: Collect recovery options before starting.

  • Collect recovery email, phone number, backup codes (if you saved them), and any government ID the service may request.
  • Check your password manager or notes for stored backup codes.
  • Good: You have at least one way to receive a reset link or code. Proceed to Try password reset.
  • Bad: You have nothing. You may need to use the service’s manual recovery flow.

Try the password reset link

Goal: Reset your password via email or SMS.

  • Open the service’s login page and click “Forgot password” or “Reset password.” Enter your email or username.
  • The service will send a reset link to your recovery email or phone. Check spam and wait a few minutes.
  • Good: You receive the reset email or SMS. Click the link and set a new password. Proceed to Verification.
  • Bad: No email or SMS after 30 minutes. Check the recovery address; if you cannot access it, see Follow recovery flow.

If 2FA is blocking you, use backup codes

Goal: Bypass 2FA with a backup code.

  • When the login asks for a 2FA code and you do not have your authenticator, look for “Use backup code” or “Try another way.”
  • Enter one of your backup codes if you saved them. Each code works once.
  • Good: The service accepts the code and lets you in. Proceed to Verification.
  • Bad: No backup codes or they are used up. See Follow recovery flow.

Follow the service’s recovery flow

Goal: Use the service’s account-recovery process.

  • Open the service’s account-recovery or help page. Gmail: support.google.com/accounts. Banks: call the number on your card or statement. Social: use the in-app “Need help?” or “Can’t access your account?” link.
  • Follow the step-by-step prompts. You may need to verify identity with a government ID, selfie, or security questions.
  • Good: You complete the flow and regain access. Proceed to Verification.
  • Bad: The flow fails or asks for something you do not have. See When to get help.

Submit identity verification if required

Goal: Complete any verification the service requests.

  • Some services require a government ID, selfie, or answers to security questions. Upload or enter what they ask.
  • Verification can take 24–72 hours or longer. Check your email for status updates.
  • Good: You receive a confirmation that your request was received. Wait for the service to review.
  • Bad: The request is rejected. Contact support directly; see When to get help.

If recovery is stuck, call support

Goal: Reach a human when the automated flow fails.

  • Call the service’s support using only official channels—the website, in-app help, or the number on your card or statement.
  • Never respond to unsolicited emails or calls claiming to be support.
  • Good: You reach a real support channel and can explain your situation.
  • Bad: No response or the flow is dead-ended. For financial accounts, call the bank. For email, recovery may not be possible.

When to get help

When recovery is unlikely or you should stop trying:

  • You cannot reach the recovery email or phone on file.
  • You have no backup codes (or they are used up).
  • The service’s automated recovery flow failed, timed out, or rejected your request.
  • You have contacted support and they have no further options.

What to do: For financial accounts, call the bank directly using the number on your card or statement. For email, losing access can lock you out of other accounts that use it for password reset—recovery may not be possible. Some accounts are unrecoverable.

To prevent future lockouts, enable 2FA and save backup codes. See Enable two-factor authentication.

Verification

  • Access regained: You are back in and can change your password or 2FA settings.
  • In progress: You have a support ticket or case number and know the next steps (e.g. 24–72 hour review).
  • Stuck: You have contacted support; if the automated flow failed, you know when to call again or that recovery may not be possible.
  • You know that recovery can take days and that some accounts may be unrecoverable.

Do you have access to your recovery email or phone?

Password reset sends a link to your recovery email or phone. If you have neither, you will need the service's recovery flow.

Identify which account is locked and what blocks you. Check if you have access to the recovery email or phone on file. Good: you have at least one way to receive a reset link. Bad: no access—you will need the service's recovery flow.

Yes No

You can change your answer later.

Did the password reset work?

Click "Forgot password" on the login page. The service sends a reset link to your recovery email or phone. Check spam.

Open the service's login page and click "Forgot password" or "Reset password." Enter your email or username. Check your recovery email or phone (and spam) within 15–30 minutes. Click the link and set a new password. Good: you are in. Bad: no email/SMS, or 2FA is blocking—try backup codes or recovery flow.

Yes No

You can change your answer later.

Is 2FA blocking you, and do you have backup codes?

When the login asks for a 2FA code, look for "Use backup code" or "Try another way."

When the login asks for a 2FA code and you do not have your authenticator, look for "Use backup code" or "Try another way." Enter a backup code if you saved them. Each code works once. Good: code accepted, you are in. Bad: no backup codes or they did not work—follow the service's recovery flow.

Yes No

You can change your answer later.

Did the service''s recovery flow work?

Gmail: support.google.com/accounts. Banks: call the number on your card. Social: in-app "Need help?" or "Can't access your account?"

Open the service's account-recovery or help page. Follow the prompts—you may need a government ID, selfie, or security questions. Verification can take 24–72 hours. Good: you regained access. Bad: flow failed or timed out—call support using only official channels (website, in-app help, number on card).

Yes No

You can change your answer later.

Call support

Call the service's support using only official channels—the website, in-app help, or the number on your card or statement. Never respond to unsolicited emails or calls. If you cannot reach recovery email or phone, have no backup codes, and the flow does not work, recovery may not be possible. For financial accounts, call the bank directly. See Enable two-factor authentication to prevent future lockouts.

Done

You regained access

You are back in. Enable 2FA and save backup codes to prevent future lockouts. See Enable two-factor authentication.

Done

Reviewed by Blackbox Atlas

Frequently asked questions

How long does account recovery take?
It varies. Password reset is often minutes. If you lost access to your recovery email or 2FA, recovery can take days—services may require identity verification. Banks and financial accounts may take longer.
What if I lost my backup codes and authenticator?
Use the service's account-recovery flow. You may need to verify identity with a government ID, answer security questions, or wait for a manual review. Recovery is not guaranteed; some accounts may be unrecoverable.
Someone asked for my verification code. Is that legitimate?
No. Legitimate support will never ask for your password, 2FA codes, or backup codes. If someone does, it is a scam. Hang up and contact the service through their official website or app.

Rate this guide

Was this helpful?

Continue to