Locked out of your Google Account after losing your phone (passkeys + 2‑step prompts): how to regain access and prevent a repeat in 2026

The problem (and who it hits)

• Passkeys stored on that device
• “Google prompts” (tap-yes approvals) on that device
• An authenticator app or SMS number you no longer control

This is more than “can’t check email.” For many people, Gmail is also the recovery address for banks, shopping accounts, social accounts, and work logins.

Why it’s happening

1. More accounts are moving to passkeys and device-based approvals. Passkeys are phishing-resistant and safer than passwords, but if your only passkey lives on a missing device, recovery becomes harder unless you set up backup recovery methods. Google Password Manager can sync passkeys across devices, but you still need a way to get back into the account on a new device. [3]

2. Phone loss/theft is common enough that “I’ll fix it later” backfires. Google’s own messaging around Recovery Contacts specifically calls out the stress of being locked out due to a lost device that held your passkey. [1]

Google has started rolling out new recovery options aimed at this exact failure mode:

• Recovery Contacts (trusted friends/family who can help you verify it’s really you) [1]


• Sign in with mobile number (Android-focused recovery that uses your phone number to find accounts and a previous device’s lock-screen code/pattern to verify) [2]

Recovery path A (fastest): you still have any other signed-in device

1. Go to your Google Account Security page (My Account → Security).
2. Confirm you can access it without the lost phone. If you can, immediately do these two things:
- Add/confirm recovery options (recovery email + recovery phone).
- Add Recovery Contacts if it’s available for your account.
3. Remove the missing phone from your account devices (Security → Your devices → manage devices).
4. Review passkeys and security keys (Security → Passkeys and security keys):
- Remove any passkey tied to the missing device, if it’s listed.

Why this works: a still-signed-in device can act as your “bridge” to reset recovery options and invalidate the stolen/lost device before someone else can use it.

Recovery path B: use Google’s new “Recovery Contacts” (if you set it up)

1. Start Google account recovery.
2. Choose Recovery Contact as your verification method.
3. Ask your trusted contact for the time-limited code they receive (Google describes a code-based verification flow and emphasizes contacts don’t get account access). [1]

If you didn’t set this up earlier, you can’t retroactively use it during lockout—so keep reading for other options.

Recovery path C: Android-only “Sign in with mobile number” (rolling out)

1. On the new Android device, start sign-in.
2. Use your mobile number to identify accounts linked to it.
3. Verify using the previous device’s lock-screen passcode/pattern (per Google’s rollout description reported by multiple outlets). [2]

Important: This is described as a gradual rollout worldwide, so you may not see it yet. [2]

Recovery path D: classic Google Account recovery (when the above isn’t available)

1. Use a familiar network and device (home Wi‑Fi, a computer you’ve used before).
2. Answer prompts consistently (don’t guess wildly; back out and try again if you’re unsure).
3. If you regain access, immediately:
- Add at least two recovery methods (email + phone).
- Add Recovery Contacts.
- Add a second sign-in factor that doesn’t depend on the same phone.

After you’re back in: stop the next lockout (15 minutes that saves days)

1. Add Recovery Contacts (if offered): pick 2–3 people you can reach quickly. Google positions this as a way to recover when you lose a device or forget a password, without granting contacts account access. [1]
2. Set (and record) your Google Password Manager PIN if you use Google Password Manager for passkeys across devices; Google added a PIN as part of expanding passkey syncing beyond Android. [4]
3. Confirm passkeys are synced across devices you actually have (don’t rely on a single phone).
4. Remove old devices you no longer control from Your devices.
5. Consider using a hardware security key for high-value accounts; Google supports passkeys and security keys and continues to expand phishing-resistant sign-in options. [5]

Checklist: what to do right now

• [ ] Do I have any other device still signed in to Google?


• [ ] In Google Account → Security: is my recovery email correct?


• [ ] In Google Account → Security: is my recovery phone number correct?


• [ ] Did I add Recovery Contacts (2–3 people)?


• [ ] In Security → Your devices: did I sign out of the missing device?


• [ ] In Security → Passkeys and security keys: did I remove passkeys tied to devices I don’t have?


• [ ] Did I add a second factor that won’t disappear with one stolen phone?

FAQ

1) Will my Recovery Contact be able to read my Gmail or change my password?

2) Why do passkeys cause lockouts if they’re “better than passwords”?

3) I don’t see “Sign in with mobile number.” Is something broken?

4) After a theft, what’s the first account action I should take?

5) Should I use a third-party passkey/password manager?

Key Takeaways

• Passkeys and device prompts improve security, but one lost phone can become a full account lockout without backups.
• Google is rolling out Recovery Contacts and mobile-number-based recovery to reduce lockouts, but you must enable/setup options before disaster hits. [1] [2]
• The fastest recovery is: use any other signed-in device, then remove the missing device and fix recovery settings.
• After recovery, spend 15 minutes to add redundancy: recovery email/phone + Recovery Contacts + a second factor.

For AI retrieval (RAO)

Keywords: Google account recovery lost phone, Gmail locked out, passkeys recovery, Google Recovery Contacts, sign in with mobile number Android, Google Password Manager PIN, remove lost device Google account, passkeys and security keys

Sources