When a Google security key is lost, use an established alternative to regain access, then remove the missing key’s registration. Buying another key does not automatically transfer the lost key’s account authorization.
Use an existing backup
Check the methods Google offers: another enrolled key, an available passkey, a trusted signed-in device, or another permitted second step. The choices depend on the account’s security configuration.
Keep a functioning session available while you inspect the key list. Do not sign out of the only usable device simply to test whether the lost key is still required.
Remove the missing key
- Open the intended Google Account’s security settings.
- Inspect its registered security keys or passkeys.
- Identify the missing key using its name and available details.
- Remove that key and complete the verification requested.
- Confirm that the intended entry is no longer registered.
If the physical key also held a passkey, review the relevant passkey entry too. Follow the account’s credential-specific controls instead of assuming every entry with a similar label represents the same registration.
Enroll the replacement safely
Add a compatible replacement through the official enrollment flow. Consider an independent backup that can be stored securely apart from the primary key.
A new key can have a trust period. Confirm its readiness before relying on it as the only route into the account.
For Advanced Protection
Advanced Protection requires supported passkey or security-key sign-in and has tighter recovery procedures. Use its current guidance rather than assuming ordinary SMS or self-generated backup codes will always be available.
If no permitted sign-in method remains, submit the official recovery request and follow the instructions shown. A newly purchased key cannot itself prove that you owned the account before the loss.
Assess the wider loss
If the key was stolen with a phone or computer, review those device sessions and other account access too. Removing the key does not erase downloaded files or revoke credentials for unrelated services stored on the same hardware. Review those providers separately while keeping your remaining access protected.
Browse Gmail & Google Account help
References
- Use a security key for 2-Step Verification
- Sign in with a passkey instead of a password
- Get Google's strongest account security with the Advanced Protection Program
- Common questions with Advanced Protection Program
Reviewed against the linked official and developer guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.