Prepare for the phone you might lose

Your phone may hold both your everyday sign-in and the second step that protects it. Losing the device is stressful enough without discovering that every recovery route leads back to the same phone.

Open the security settings for your main email account. Check the recovery options the provider supports. If backup codes are available, generate them and store them securely somewhere you can reach without that phone. Google, for example, provides single-use backup codes for accounts using two-step verification.

Treat recovery codes like passwords. Do not email them to yourself or hand them to someone who calls claiming to be support. If you generate a replacement set, update the stored copy; old codes may no longer work. A second supported security key can be another option.

Review the process while you still have access. For work accounts, follow the administrator’s recovery procedure. The goal is a separate, protected way back in, not a weaker everyday login or a screenshot trapped on the device you just lost.