Key Takeaways
- Most account lockouts can be resolved using a recovery email, phone number, or backup code.
- Having a backup contact method set up before a lockout happens is the single most effective safeguard.
- If automated recovery fails, contact the platform's support team directly with proof of identity.
- A password manager reduces the chance of forgetting credentials in the first place.
What you will need
Why account lockouts happen
Most lockouts fall into one of a few categories: a forgotten password, too many failed sign-in attempts triggering an automatic security hold, a suspected breach prompting the platform to reset your access, or losing a phone that was tied to two-factor authentication. Banking and financial accounts may also lock after a period of inactivity.
Knowing the cause matters because it points you toward the right recovery path. A forgotten password is usually resolved in minutes. Losing access to your two-factor authentication device takes longer and may require manual identity verification.
What you will need
Step-by-step recovery process
Follow these steps in order. Most users regain access during steps 1 through 5 without needing to contact support.
Go to the platform's official sign-in page
Open a browser and navigate directly to the platform's official website. Do not search for recovery links through a search engine; type the address yourself or use a saved bookmark. Phishing pages often mimic real login screens and can steal whatever you enter.
Click 'Forgot password' or 'Can't sign in'
Every major platform puts a recovery link directly on or below the sign-in form. The wording varies: 'Forgot password', 'Trouble signing in', 'Need help', or similar. Click it to start the automated recovery flow.
Choose a recovery method
The platform will offer one or more options based on what you set up when you created the account. Common choices include:
- A reset link sent to your recovery email address
- A one-time code sent by text message to your phone number
- An authenticator app code, if you enabled two-factor authentication
- A set of backup codes you saved at account setup
Select the method you currently have access to.
Follow the verification steps
Open your recovery email or check your texts for the code or link the platform sends. Most codes expire within 10 to 15 minutes, so act promptly. Paste or type the code exactly as shown, then follow the on-screen prompts to set a new password.
Create a strong new password
When prompted, set a new password that you have not used on this platform before. A strong password is long (14 or more characters), mixes letters, numbers, and symbols, and does not contain guessable information such as your name or birth year. A password manager can generate and store this automatically. For a guided setup, see setting up a password manager for the first time.
Contact support if automated recovery fails
If you no longer have access to the recovery email or phone number on file, automated recovery will not work. At that point, use the platform's official support or help center to open a manual identity verification request. You will typically need to:
- Confirm personal details associated with the account (name, approximate creation date, recent activity)
- Upload a photo of a government-issued ID in some cases
- Wait one to several business days for a human reviewer to respond
Find the support contact through the platform's own help center, not through a third-party site.
Update your recovery information after regaining access
Once you are back in, go immediately to the account's security or privacy settings. Confirm that your recovery email address and phone number are current. Generate a fresh set of backup codes if the platform offers them, and store them somewhere offline (printed or in a password manager). This step is what prevents the same lockout from happening again.
Set up recovery options before you need them
The time to add a recovery email and phone number is right after creating an account, not after a lockout. Go to the security settings of your most-used accounts today and confirm that the contact information listed is current and accessible. Generating and saving backup codes takes about two minutes and removes the biggest single point of failure.
When recovery does not work
Some situations require extra patience. If your account was created with an email address you no longer control, and you did not add a phone number, automated recovery may be blocked entirely. Platforms vary in how much help they can offer: social media accounts with no identity verification on file are harder to recover than accounts tied to a real name and payment method.
For financial accounts (banking, investment, or payment apps), call the institution's official customer service number. These accounts have stricter but also more thorough identity checks, and phone agents often have recovery options that the website does not surface. Always get that number from the back of your card or the institution's official website.
Financial accounts: use official channels only
If you are locked out of a banking or payment account, do not attempt recovery through any channel other than the institution's official website or the phone number printed on your card or statement. Fraudulent recovery pages targeting financial accounts are common. Never enter your full account number, Social Security number, or card details into a site you reached through a search engine result or unsolicited link.