Free Tool · 5 minutes

Two-Factor Recovery Plan Builder

If your phone is lost, stolen, or replaced, two-factor codes don\'t always come along. This tool builds a printable plan so you can get back into every important account.

Step 1: Which accounts have 2-factor turned on?

Check every account where you receive a text code, use an authenticator app, or get a code by email when you sign in. We\'ll build a recovery plan for each.

Primary email (Gmail, Yahoo, Outlook, iCloud)

Email is the master key. Most other accounts use email-based password resets, so losing your email locks you out of everything else.

Apple ID or Google Account (whole-phone account)

Losing this account locks you out of all your photos, contacts, app purchases, and synced data. Recovery without a backup plan can take 2 weeks or longer.

Bank account (Chase, Wells Fargo, BoA, Citi, etc.)

Bank apps usually require text-message codes for login on a new phone. If you lose your phone before the new one is set up, you may be locked out for 24–72 hours.

Credit card accounts (Visa, Mastercard, Amex, Discover)

Most card issuers can re-verify by mail, but it takes 5–10 days. Faster recovery requires a backup phone or email on file.

Social Security online (my Social Security at ssa.gov)

My Social Security uses Login.gov or ID.me with strict identity verification. Recovery requires uploading a photo of your driver license — without smartphone access, this is hard.

Medicare account (medicare.gov)

Medicare uses the same Login.gov / ID.me system as Social Security. Recovery is moderately difficult and requires the same identity-verification process.

Authenticator app (Google Authenticator, Authy, Microsoft Authenticator)

If your phone is lost or replaced, the codes in your authenticator app may NOT transfer automatically. You need backup codes for every account that uses the authenticator.

Phone carrier (Verizon, AT&T, T-Mobile)

A SIM-swap attack — where a scammer transfers your phone number to their phone — bypasses most 2FA. Carrier security PINs prevent this.

Social media (Facebook, Instagram, X)

Lower priority than financial accounts, but still useful — Facebook in particular has long recovery windows and is hard to get back without backup options.

Why this matters

Two-factor authentication is excellent security — but if you lose your phone without a backup plan, recovery can take 2 days for a bank account or 2 weeks for an Apple ID. Most people only realize this AFTER they need it. Spending 30 minutes today on a plan saves real heartache later.

Built from public guidance by Apple, Google, Microsoft, and the FTC. Nothing you select on this page is recorded — the plan is generated entirely in your browser.