How to prepare account recovery before failure
A good plan answers one question: how will you sign in when you don't have a phone? Prepare it for mail, password manager and device account.
In this guide
The password you have in the manager. The code to the manager is on the phone. A copy of the recovery codes lies in the cloud to which you log on the same phone. Each item works as long as the device is available. After it is lost, the entire system can block itself.
The recovery plan should have at least one useful path independent of the equipment that is most easily lost. It is not about multiplying copies without control, but about checking the dependency.
Start with three accounts
Select mail, password manager and device or cloud provider account. Save for everyone what login looks like and what the service offers when losing the main method.
An example of an organisational note may read: "Postage: Daily key, backup key at home, recovery instructions on the official website." Do not enter passwords and codes in the same usual note.
Also check that the recovery address is still working and that the phone number belongs to you. A backup box whose password you do not remember and have no saved password is not a ready-to-use emergency method.
Select a space for codes
If the service releases recovery codes, read the rules for using them. They are usually one-time, and the generation of a new set invalidates the previous one. Mark a copy of the service name and creation date so as not to confuse it with the old one.
- Print or manually store in a place protected from other people's access and accidental destruction.
- Keep an encrypted copy so you can open it without a lost phone.
- Also keep the password manager's recovery code outside his safe.
Do not save the only copy in the phone gallery. Do not send the codes in the message “to yourself” if access to this box is exactly what you are trying to secure.
Run the test without failure
Leave the current session open. Start a new login and check the alternative key or other registered method. If you are testing a one-time code, mark it as used; do not count on reuse.
Do not disable all methods at the same time to “test recovery”. Some processes trigger delays or additional control. Simply determine where the copy is, whether it can be read and whether the alternative method is correctly recorded.
When do we get back to the plan?
After changing your phone, number, password manager or valid login method. Remove outdated copies and check out new ones. If you provide emergency access to a trusted person, learn the terms of this function and the scope of the permissions.
You can use this to sort things out. recovery planWrite down the state of preparation, not the secrets themselves. A ready plan is to help you find the right path of entry also when you are under stress.