How to recover Google auth after phone stolen?

How to Recover Google Authenticator After Phone Theft

Immediate Actions:

1. ·

   Revoke access to the stolen device

   • ·Sign in from a trusted device and go to Google Account Security.
   • ·Under Your devices, remove the stolen phone.
   • ·Change your Google password immediately.
2. ·

   Try Backup Codes First (Fastest Method)

   • ·If you saved 10 one-time backup codes (printed or in a password manager), use them by selecting Try another way → Enter backup code during login.
   • ·Once logged in, re-enable 2-step verification with a new device.
3. ·

   Use Secondary 2-Step Methods

   • ·If you set up alternatives (Google Prompt, SMS, security key, or another Authenticator app), use these to bypass the stolen phone.
   • ·Example: If you have Google Prompt, approve the sign-in on a trusted device.
4. ·

   Account Recovery (If No Backup or Secondary Method)

   • ·Go to Google Account Recovery.
   • ·Answer verification questions accurately (e.g., last known password, account creation date, recovery email/phone).
   • ·Use a device and network you’ve previously signed in from to improve success.
5. ·

   Reset 2-Step Verification on a New Device

   • ·Once recovered, go to Google Account → Security → 2-Step Verification → Turn off (confirm with password).
   • ·Re-enable with a new Authenticator app (e.g., Google Authenticator, Authy), scan the QR code, and save fresh backup codes.
   • ·Add secondary methods (e.g., security key, SMS) for redundancy.

Long-Term Security Upgrades:

• ·Store backup codes securely (printed + encrypted digital copy).
• ·Enable a hardware security key (YubiKey, Titan) for phishing-resistant 2FA.
• ·Audit account activity and revoke suspicious sessions or app passwords.
• ·Set up Google Sync (for Authenticator backups) or use apps like Authy that sync across devices.

Checklist for Recovery:

[ ] Revoke stolen device in Google Account → Security. [ ] Try backup codes or secondary 2FA methods. [ ] Use account recovery if needed (answer details accurately). [ ] Re-enable 2FA on new device, save new backup codes. [ ] Add a security key or secondary method for future resilience.

Key Takeaway: Backup codes and secondary methods are critical. If missing, account recovery is slower but feasible with accurate details. Always re-secure accounts immediately after device loss.