Review current recovery addresses and phone numbers

Open your account settings on account.apple.com or myaccount.google.com and list every recovery email and phone number. Remove any number you no longer control or that belongs to a former employer or carrier. Google recovery options can send alerts and reset codes. Apple uses trusted phone numbers for two-factor authentication and account recovery. Both services let you add multiple entries. Taking time now to audit these entries prevents situations where a reset code goes to an unreachable inbox or a phone that no longer rings. A direct personal email that you alone control provides an independent path back into the account even if your primary phone is lost or a work address is deactivated.

Stale entries create silent failures because services may still attempt to reach them during recovery. Checking the full list reveals numbers that forward SMS or that route to old carriers. Adding a second email you control directly, rather than a shared or employer inbox, gives redundancy without introducing new dependencies. After updates, request a verification code for each method while access remains full so you confirm delivery before any emergency occurs.

  • Delete numbers that forward SMS or that you cannot answer in person.
  • Add a second email address you control directly, not a work or shared inbox.
  • Test each recovery method by requesting a code while you still have full access.

Add or update a recovery contact on Apple

Apple allows up to five recovery contacts who can generate a six-digit code during account recovery. The contact must use an Apple device on iOS 15 or later and have iMessage enabled. Recovery contacts receive no access to your data. They only supply a code after you contact them directly. Choose people you can reach in person or by phone. This option adds a human layer that does not rely on a single device or carrier, yet it still requires the contact to remain reachable and on the Apple platform.

Before adding anyone, verify they keep an active Apple device and continue using iMessage. Contacts who later switch carriers or hardware can no longer generate codes, so periodic checks keep the list functional. Maintain a private offline record of the people you selected so you can reach them quickly if you ever need their assistance. Removing outdated contacts prevents confusion during a recovery attempt.

  • Confirm each contact still has an active Apple device before relying on them.
  • Remove contacts who change carriers or stop using Apple hardware.
  • Keep a private list of who you added so you remember during an emergency.

Create and store a recovery key

Both platforms offer a recovery key or backup code option. Apple generates a 28-character recovery key that replaces standard account recovery when enabled. Google provides backup codes under 2-Step Verification settings. These keys serve as a last-resort method that bypasses phone numbers and email addresses entirely. Print the key or write it down. Store copies in separate physical locations. Never save the key inside any cloud folder or note app linked to the account.

If any code might have been seen by others, generate a fresh set immediately. Testing the key on a secondary device while you still have normal access confirms it works and familiarizes you with the exact steps required later. Once a recovery key is active on Apple, the usual recovery process changes, so understanding this shift ahead of time avoids surprises. Disable the key only after you have printed a fresh one if you decide to stop using it.

  • Generate new codes if you suspect any have been seen by others.
  • Test the key on a secondary device before an actual lockout occurs.
  • Disable the key only after you have printed a fresh one if you decide to stop using it.

Clean up trusted devices and stale numbers

Sign in to your account page and review every listed device. Remove phones, tablets, or computers you no longer own or use. Old devices can still receive verification codes or be used in recovery flows. Stale phone numbers create the largest single point of failure. Update carrier-linked numbers immediately after any number change. Keeping the device list current reduces the chance that a forgotten phone or tablet becomes an unintended recovery vector or blocks a legitimate reset.

Before selling or recycling hardware, sign out of all services so the device no longer appears in your account. Check for any SMS forwarding rules left by previous carriers that could divert codes. After removals, re-add only devices you currently use to keep the list accurate and useful during future recovery attempts.

  • Sign out of services on devices before selling or recycling them.
  • Check for SMS forwarding rules set by previous carriers.
  • Re-add only current devices after removal to keep the list accurate.

Limitations and next steps

Recovery keys and contacts add protection but also create new single points of failure if lost. Google Advanced Protection requires security keys and limits some third-party app access. Apple turns off its standard recovery process once a recovery key is active. These trade-offs mean you must weigh convenience against security and decide which methods fit your situation. Schedule a quarterly review of recovery settings. Keep printed keys and contact lists in a safe but accessible place separate from your devices.

Test recovery flows on a test account first if you are unsure of the steps. Document the exact recovery process for each account in a secure offline note so you or a trusted person can follow it later. Replace any recovery method that depends on a single phone number with a combination of email, contacts, and keys to avoid that common failure mode.

  • Test recovery flows on a test account first if you are unsure of the steps.
  • Document the exact recovery process for each account in a secure offline note.
  • Replace any recovery method that depends on a single phone number.