Recovery planning.
THE RISK
Two-factor authentication protects the account and can lock you out.
WHAT CAUSES LOCKOUT
A lost or replaced phone An app reinstalled without backup A changed phone number, for message-based codes Recovery codes lost
WHAT TO DO IN ADVANCE
Store recovery codes separately Register a second device where possible Keep the recovery email address current and accessible
THE RECOVERY EMAIL POINT
If it is on your own domain and the domain fails, recovery fails.
Use an independent address for critical accounts.
WHEN CHANGING PHONES
Transfer your authenticator before disposing of the old device.
That step is frequently forgotten.
WHAT TO DO IF LOCKED OUT
Use recovery codes Use the service's recovery process Contact support with proof of identity
WHAT SOME SERVICES CANNOT DO
Recover an account at all.
Know which those are.
WHAT TO TEST
Whether you could recover a critical account without your phone.
Most people discover they cannot.
