Key steps to take when you lose your phone with Authy
If you use Authy and lose your phone, act quickly to protect your accounts and regain access. First, report the lost device to your phone carrier to suspend cellular service and reduce interception risk. Then sign in to authy.com from a trusted device using your registered credentials to remotely manage devices. From there, you can either reinstall Authy on a new phone and use an encrypted backup passphrase, or request an account recovery if you cannot access any backups. If you set up backups properly beforehand, restoring tokens is straightforward; otherwise support may guide you through verification. Use this checklist to prepare or respond calmly and securely.
How Authy account recovery works
Authy links your tokens to an account protected by a registered email and a master password you set during onboarding. When you lose your phone, you can access authy.com on a computer or another device to sign in and view your multi-factor tokens. If you have enabled encrypted backups, you can install Authy on a new phone and decrypt the cloud backup using your backup passphrase. If you did not back up, Authy support can help verify your identity and, where eligible, assist with account recovery to restore access. Understanding this flow in advance reduces downtime and prevents lockouts.
Prepare before you lose access
Set up encrypted backups and save your passphrase
Encrypted backups protect your tokens in the cloud and are central to recovery. In the Authy app, enable encrypted backups and store the generated backup passphrase in a secure password manager or a physical safe. Never store the passphrase in the same place as your device. This passphrase is essential to decrypt tokens on a new installation and is not stored by Authy, so losing it can block recovery even with account access.
Register multiple trusted devices and recovery contacts
Adding more than one device to your Authy account ensures you can still receive tokens if one device is lost. You can also designate recovery contacts who can help restore access under defined conditions. Keep your registered email current and ensure you can receive messages via an alternate channel. These steps make both daily use and recovery smoother when a device goes missing.
If your phone is lost or stolen: immediate actions
- Contact your carrier to suspend or freeze the line, and report the device as lost or stolen.
- Remotely lock or wipe the phone if the device supports remote management and you are able to do so.
- Sign in to authy.com from a known, secure device and review the Devices page to revoke the lost phone.
- Rotate credentials for critical accounts (email, password manager, banking) if you cannot confirm the phone is only lost and not compromised.
- Contact Authy support if you need help restoring access or recovering your account.
How to reinstall Authy and restore from backup
After you secure your line and revoke the lost device, reinstall Authy on a new phone from the official app store. During setup, choose to restore your tokens using an encrypted backup and enter your backup passphrase exactly as saved. If you do not have an encrypted backup, you may still be able to recover individual tokens by scanning QR codes from other devices or by requesting assistance from Authy support. Once restored, reconfigure your devices and backups to prevent future interruption.
Authy account recovery options and limits
Recovery feasibility depends on whether you used encrypted backups, whether you can access alternate authentication factors, and whether you can verify your identity to support. Authy does not provide backups by default, and they cannot decrypt or override your passphrase. If you have no backup, recovery may require detailed verification or manual re-registration of tokens. Contacting Authy support promptly with clear information about your setup improves the chances of a successful outcome.
Compare recovery approaches when you lose your phone
| Scenario | What you need | Likely outcome |
|---|---|---|
| Encrypted backup + passphrase available | Backup passphrase, access to email or registered phone | Full token restore on a new device |
| No encrypted backup, but other devices still enrolled | Access to another authorized device or account email | Reconfigure tokens manually or move to a new device |
| No backup, no other devices, unknown credentials | Identity verification and support assistance | Limited recovery; may require manual re-authentication with services |
Best practices to avoid future lockouts
- Save your encrypted backup passphrase in a password manager and also store a copy offline.
- Keep at least one other authorized device on your Authy account.
- Ensure your account email is current and accessible via an alternate recovery method.
- Periodically review the Devices page and revoke devices you no longer use.
- For critical accounts, consider a secondary 2FA method such as a security key or an authenticator app on another device.
When to contact Authy support
Reach out to Authy support if you cannot access authy.com, do not have an encrypted backup, or need help verifying your identity. Provide details about your account, registered email, device history, and steps you have already taken. Support will guide you through their verification process and explain what options are available based on your setup. Early contact improves resolution speed.
Long-term security hygiene after losing a device
After recovery, review your 2FA setup across important accounts and rotate passwords where appropriate. Enable notifications for new device enrollments if supported, and keep recovery methods documented in your password manager. Treat your encrypted backup passphrase with the same care as other critical credentials, since it is the key to restoring access.
By combining encrypted backups, multiple devices, and a current recovery plan, you reduce the impact of a lost phone and keep your 2FA resilient over time.