Account recovery

Account recovery is the process for getting back into an account when you forget your password or lose your sign-in device. It usually relies on a recovery email address, a phone number, backup codes or security questions. Because recovery can bypass your normal login, weak recovery settings are a common back door for attackers. Keep your recovery email and phone current, protect the recovery email with MFA, and save backup codes, which are one-time codes given when you set up MFA, in your password manager or on paper in a safe place. Where possible, register two sign-in methods so losing one device does not lock you out.