Losing a phone or hardware security key does not automatically mean losing the passkey protected by it. First determine whether the credential was synchronized to a credential manager or stored only on the missing device, then try another enrolled sign-in method. If nothing works, use the account provider’s recovery process. After you regain access, remove the missing credential, secure the phone number and device, review active sessions, and register independent backups.
Start with this five-minute triage
A passkey is an authenticator for a particular account, not a universal account-recovery service. The correct recovery path depends on where its private credential was stored, what other methods you enrolled, and the rules of the account provider.
As an Amazon Associate I earn from qualifying purchases.
- Decide whether the phone is actually lost. If it is nearby, make sure it can be unlocked and that a screen lock is enabled. A passkey may be unusable when screen lock is disabled. If you are signing in on another device with your phone, Bluetooth may need to be on, the devices may need to be close together, and both need an internet connection. Google documents the screen-lock and “Try another way” behavior in its passkey help; Microsoft lists Bluetooth, distance and connectivity as common cross-device causes in its passkey troubleshooting guide.
- Choose “Try another way” or the equivalent link. Look for another passkey, a security key, a verification code, a trusted-device prompt, backup codes, or recovery contact details. The labels differ by service.
- Check whether the passkey was synchronized. A passkey in a cloud-backed credential manager may reappear when you sign in to that manager on a replacement device. A device-bound passkey or one stored on a physical key will not transfer automatically.
- Protect the missing phone or number. If theft is possible, lock or remotely erase the phone where your platform supports it, contact the carrier about moving the number to a replacement SIM, and do not share one-time codes with anyone.
- Use account recovery only after the other options fail. Recovery rules, identity checks and waiting periods are set by each provider.
Know where the passkey was stored
| Credential location | What happens when it is lost | What can restore access |
|---|---|---|
| Synced credential manager | The passkey may still exist in the provider’s encrypted account vault. | Recover the credential-manager account and sign in to it on a replacement device. |
| Device-bound authenticator | The private key remains on the missing phone or computer and does not copy itself elsewhere. | Another registered passkey, security key, backup code, trusted device, or the service’s account-recovery process. |
| External FIDO2 security key | The credential remains on that physical key; buying another key does not clone it. | A second key enrolled earlier, another sign-in method, or account recovery. |
The FIDO Alliance defines a passkey as “an authentication credential based on FIDO standards.” A passkey provider can be an operating-system or browser manager, a third-party app or extension, or a hardware authenticator. That distinction determines whether replacing a phone can restore the credential or merely gives you a new device on which to create one.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Try every independent sign-in method you already registered
At the account’s sign-in screen, select another passkey or the service’s alternative-sign-in option. Possible choices include:
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- a second passkey on another phone, tablet or computer;
- a separately registered FIDO2 security key;
- backup or verification codes;
- a prompt delivered to another trusted device;
- a recovery email address or phone number;
- a computer that the provider previously marked as trusted.
These choices are account-specific; seeing one on one service does not mean every service offers it. For Google accounts using 2-Step Verification, Google lists verification codes, Google prompts, backup codes, another added security key and a registered computer as possible alternatives. Its lost-key guidance also directs users to account recovery when no usable second step remains.
Keep trying from a familiar device and network if possible. Providers may treat a new browser, unusual location or recently changed phone number as additional risk signals. Do not repeatedly guess a device passcode or recovery answer; an account can impose lockouts, and some provider-specific recovery systems have strict attempt limits.
Restore a synchronized passkey on a replacement phone
A synchronized passkey is stored by a credential manager and made available on multiple devices after you authenticate to that manager. This is convenient, but it makes access to the manager’s account and its recovery factors critical. If you cannot recover that account, synchronization alone cannot rescue the passkey.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
- Set up the replacement phone with its current operating system and enable a strong screen lock.
- Install or activate the same credential manager that held the passkey. This might be the phone’s built-in manager, a browser manager, or another provider-supported app.
- Sign in to that manager using its account password, recovery email, trusted number, security key or other available factor.
- Allow synchronization to complete, then return to the website and select the restored passkey.
- If the website still offers only the missing device, choose “Try another way,” remove the lost credential after you regain access, and create a new passkey on the replacement phone.
Microsoft recommends synchronized storage where practical and advises creating passkeys on additional devices when credentials are stored locally. Its explanation of passkeys is available at Microsoft’s passkey documentation. The FIDO Alliance describes the provider model and synchronization considerations at its passkeys explainer.
Apple-specific recovery when all associated devices are gone
Apple says passkeys synchronize through iCloud Keychain and describes a recovery route for a lost-device situation. Its published procedure requires Apple Account authentication, an SMS sent to the registered number and the device passcode. Apple’s documentation, published September 16, 2024, says the escrow recovery process permits 10 authentication attempts before the escrow record is destroyed; after several failed attempts, Apple Support must grant additional attempts. Do not keep guessing. Follow the current instructions in Apple’s passkey security guidance or contact Apple Support.
Apple also notes that a recovery contact can help with Apple Account access if you forget the password or device passcode. That contact helps recover the account protecting the credential manager; it does not copy a device-bound passkey from a lost phone.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
When no passkey or backup method works
Use the account provider’s official recovery flow. There is no single passkey recovery procedure that works on every website.
Recommended Free Tools
Personal Google accounts
Google’s recovery process asks questions to verify ownership and may request an email address or phone number where you can be reached. For a Google account protected by 2-Step Verification, Google says recovery can take 3–5 business days when no other second step is available. That is a Google-specific estimate, not a general passkey waiting period. Start at the Google account-recovery guidance and provide information from a familiar device whenever possible.
Work and school accounts
An organization may restrict which passkeys, security keys and recovery choices employees can use. Contact the IT or identity administrator rather than repeatedly attempting consumer recovery. Microsoft Entra includes an account-recovery capability for users who lose all registered authentication methods, but the organization must configure it and may apply its own approval process. Details are in Microsoft Entra’s account-recovery overview.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Other websites
Open that service’s help center from a known-good device and search for “lost security key,” “lost phone,” or “can’t use passkey.” A relying party can require identity checks, support review or a waiting period that differs from the examples above. Never assume that purchasing a new key or installing a new authenticator app will bypass those rules.
Secure the account immediately after you get back in
- Remove the missing passkey or security key. In the account’s security settings, open the list of passkeys or security keys, identify the entry tied to the lost phone or key, and revoke it. Use a clear name such as “old phone” or the key’s serial label so you can identify it later.
- Review active sessions and devices. Sign out the lost phone and any browser sessions you do not recognize. Google explains lost-device sign-out and session review in its passkey guidance.
- Check the credential manager too. A passkey may remain in a third-party manager even after you remove its registration from the website. Google advises checking the manager when a removed credential still appears.
- Secure the phone number. Ask the carrier to transfer your number to a replacement SIM or eSIM, add the carrier’s account PIN, and report a stolen device. A phone number used for recovery is itself an account-recovery factor.
- Change exposed secrets. If the missing phone was unlocked, or if its password manager might be accessible, change the password for the credential manager and high-value accounts, then revoke unfamiliar app sessions.
- Add replacements before ending the recovery session. Register a new passkey on the replacement phone and at least one independent backup method.
Choose a recovery setup that matches your risk
| Setup | Main advantage | Main dependency | Best preparation |
|---|---|---|---|
| Synced passkey manager | Passkeys can follow you to replacement devices. | Access to the manager account, its recovery factors and synchronization service. | Keep the manager’s recovery email, phone and backup codes current. |
| Device-bound passkeys on several devices | No single phone contains the only credential. | You must enroll each device in advance and keep at least one available. | Add a second phone, tablet or computer and label each entry. |
| Two or more FIDO2 security keys | Strong, independent physical backups that do not rely on a phone battery or network. | A lost key cannot be duplicated after the fact. | Register a spare key now and store it separately in a secure place. |
The trade-off is convenience versus independence. Synchronization reduces disruption when a phone is replaced, but recovery of the credential-manager account becomes essential. Device-bound credentials limit cloud dependence, but they require deliberate backup enrollment. Hardware keys are independent and portable, yet a replacement key helps only if it was registered before lockout or after the account has been recovered.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchBuild a backup before the next loss
- Register a second passkey on a different device whenever the service permits it.
- Add a second FIDO2 security key to important accounts before the primary key disappears. Store the spare separately and securely; Google specifically recommends an additional security key as a backup and supports passkeys on FIDO2 keys in its passkey instructions and lost-key guidance.
- If you use device-bound passkeys, create digital spares on other devices. Microsoft recommends this approach when credentials are stored locally.
- Verify that recovery email addresses and phone numbers still work, and keep backup codes somewhere accessible but protected.
- Store backup credentials independently of the phone they are intended to replace. A code saved only in the lost phone is not a backup.
- Keep screen locks enabled and never create passkeys on a shared or public device.
- Record which account entry belongs to which phone or key so you can revoke the correct credential quickly.
Common failure symptoms and fixes
The passkey prompt says the phone cannot be found
Turn on Bluetooth, bring the devices close together, connect both to the internet and unlock the phone. If the phone is genuinely gone, select another sign-in method rather than treating the message as proof that the passkey was deleted.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
The replacement phone has no passkeys
Confirm that you signed in to the same credential manager account, not merely the same email address inside the website. Check synchronization status, complete any manager-level verification, and then create a new passkey if the original was device-bound.
A new security key will not sign you in
A newly purchased key has no authority until the account registers it. Use an existing method or account recovery first, then add the new key in security settings.
The provider keeps offering only the lost credential
Look for “Try another way,” “Use a different device,” or a recovery link. If none appears, use the provider’s official recovery process; the website may require support intervention before it permits a replacement authenticator.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →You are locked out of the credential manager itself
Recover that manager account using its own recovery email, phone, backup codes or support process. A synchronized passkey cannot be restored while the account that protects the vault remains inaccessible.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
