# Locked out of everything after phone theft > A stolen phone can lock you out of all your accounts with no human support available to help you recover. - Title: Locked out of everything after phone theft · Hacker News - Summary: A stolen phone can lock you out of all your accounts with no human support available to help you recover. Set up multiple recovery methods before you need… - Keywords: google account recovery, two-factor authentication, phone theft, account security, password managers, authenticator apps, backup codes, digital security, account lockout, recovery options, technology, startups - Source: Hacker News — https://news.ycombinator.com/item?id=49742976 - Read time: 3 min - Topics: google account recovery, two-factor authentication, phone theft, account security, password managers, authenticator apps, backup codes, digital security, account lockout, recovery options, technology, startups ## Phone stolen, accounts locked After losing a phone, the user cannot access Google accounts, email, banking, or any service using 2FA. Google's recovery options all require access to the lost phone or an old email unused for 12 years. > once your phone is gone, you are completely over with society? ## Recovery options don't work Google offers three recovery paths: use old phone (gone), use current phone (gone), or use old email (unused for 12 years). None are accessible to the user. ## SMS recovery might work One commenter suggests buying a new phone and using SMS recovery to receive a one-time password, then transferring the phone number to the new device. > buy a new phone and have them send you an OTP via SMS ## eSIM complications eSIM phones create additional problems when lost or stolen. Moving an eSIM to a new device becomes a maze with the carrier, especially if you have no other account access. ## Society depends on phones A lost phone means no transportation, no payments, no hotel access, no communication. One person lost their phone while traveling and couldn't navigate, pay, or contact anyone. ## Backup codes are essential When setting up 2FA, services provide backup codes. If you don't save these codes and lose your phone, you may be locked out permanently. > If you don't have the authenticator backup codes and you didn't turn on cloud sync in the app, you might be out of luck. ## Google's security blocks recovery Google's account protection is so strict that even legitimate owners get blocked from recovery. One user provided correct password and recovery email but still couldn't access their account. ## No human support available Google explicitly states you cannot call for account help. The company does not work with any service claiming to provide account or password support. > For your security, you can't call Google for help to sign into your account. ## Self-hosted password managers help One user keeps a self-hosted Vaultwarden instance with all passwords and 2FA codes. If locked out of everything else, they can still access recovery information from any device. ## Multiple devices prevent lockout Keep a second phone at home logged into critical services. When your primary phone is lost, the backup device still has access to 2FA codes and recovery options. ## Third-party authenticators offer backup Apps like Authy and Ente Auth sync across multiple devices and allow export and import of 2FA codes, unlike Google Authenticator which is device-locked. ## Print recovery codes Write down or print backup codes from each service and store them in a safe place like a home safe or safety deposit box. This provides offline recovery access. ## Passkeys add another layer Physical security keys or passkeys can be registered as backup authentication methods. Keep multiple keys in different locations for redundancy. ## Password managers store 2FA Bitwarden and similar password managers can store TOTP codes alongside passwords. This creates a single backup point but requires strong master password security. ## Recovery email must be current Keep your recovery email address active and accessible. An old email you haven't used in years becomes useless as a recovery option. ## SMS has tradeoffs SMS 2FA is less secure than app-based codes but provides recovery when you lose your phone. Some users keep SMS enabled specifically for this reason. ## Carrier SIM locks prevent theft Add a PIN or security code to your mobile carrier account to prevent someone from transferring your number to a new SIM card. ## Test recovery before crisis Regularly verify that your recovery options work. Check yearly that you can still access critical accounts through backup methods. ## Community can help The original poster was helped by a Hacker News member who worked at Google and could escalate the account recovery request internally. ## Key takeaway Set up multiple recovery methods before you need them: backup codes, alternative devices, recovery emails, and physical security keys.