When the lost phone held your verification prompts, Authenticator codes, and passkeys, start by listing what remains accessible. Replacing the phone hardware does not automatically restore every authentication method that was stored on it.
Check the remaining routes in order
- Look for another device already signed in to the account.
- Check whether a second enrolled security key or passkey is available.
- Find any Google backup codes you previously saved securely.
- Check an eligible backup phone or other verification option offered by Google.
- If these are unavailable, use the official account-recovery flow.
Keep any working browser session intact while you investigate. A code saved only inside the lost phone is not an available backup. Likewise, Authenticator synchronization helps only if the codes were actually synchronized and you can access the relevant Google identity.
Separate phone-number recovery from account recovery
If you still own the number, your mobile provider may be able to restore service to a replacement SIM or device after its own identity checks. That can help only with methods that actually use the number. It does not recreate local Authenticator secrets or a device-bound passkey.
If you no longer own the number, do not ask its new holder to relay security codes. Use the alternatives offered for your account.
Use a familiar environment for Google recovery
Try a computer and browser you normally used with the account, from a familiar location. Answer ownership questions accurately and supply the most recent remembered password when asked. Google may impose a security hold; follow the displayed instructions.
You cannot enroll a new recovery contact or selfie video from outside the locked account merely because the phone was lost. Those options must have been configured beforehand and must be offered in the recovery flow.
Secure the missing device
From a trusted accessible session, inspect Google Account Security & sign-in → Manage all devices and sign out relevant sessions on the lost phone. A device can have several sessions. Remote sign-out does not erase downloaded files or replace the device manufacturer’s lost-device protections.
For a work or school account, contact the administrator promptly. Once access is restored, review recovery settings and test a separate backup method before retiring the remaining working device.
Official references
- Fix common issues with 2-Step Verification
- How to recover your Google Account or Gmail
- Tips to complete account recovery steps
- See devices with account access
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.