Passkeys
What Happens If You Lose a Device With Your Passkeys?
Losing a device with passkeys does not automatically mean someone can access your accounts, but you should revoke device access and confirm recovery options. This guide explains practical steps after loss or theft.
A lost passkey device is urgent but manageable
If you lose a device with passkeys, use another trusted device to lock or erase the lost device, revoke its sessions, review account security, and confirm recovery methods. A passkey usually requires device unlock, so loss alone does not automatically give someone account access.
The risk depends on whether the device is locked, whether someone knows the device PIN, whether the account syncs passkeys, and whether important accounts have backup recovery methods.
Act quickly, but avoid assuming every account was accessed. Verify through official account security pages.
How passkey access works after device loss
Passkeys are designed so you do not type a password into websites. The device or synced account helps approve sign-in. If the lost device is protected by a strong screen lock, that helps prevent casual access.
Some passkeys sync through platform accounts, while others may be device-bound. Apple and Google publish provider-specific passkey recovery and device-management guidance, and the details matter.
If your device is stolen and unlocked, or if someone knows the device PIN, the risk is higher.
- Device screen lock strength.
- Whether the device was unlocked.
- Whether passkeys sync to other devices.
- Whether you have backup recovery methods.
- Whether sessions remain active.
- Whether the device can be remotely locked or erased.
Do not share recovery codes under pressure
After losing a device, scammers may impersonate providers, carriers, or support teams. Do not share one-time codes, backup codes, account passwords, or device unlock PINs with anyone who contacts you.
Use official device-finding tools, official account pages, and official carrier support. Do not rely on phone numbers sent in suspicious messages.
Lock, locate, or erase the device
Use official tools such as Apple Find My or Google's device-finding features if available. Mark the device lost, lock it, or erase it depending on the situation and your confidence that it can be recovered.
If the device contains work data, contact your employer's IT or security team immediately.
Revoke sessions from important accounts
From another trusted device, review active sessions for email, banking, cloud storage, social media, password manager, and work accounts. Sign out the lost device where possible.
Change passwords for accounts that still use passwords and may have been accessible on the device.
Review passkeys and recovery settings
Check which passkeys or trusted devices are registered. Remove the lost device from account security settings if the provider allows it.
Confirm recovery email, recovery phone, backup codes, and MFA methods are current.
Protect your phone number and SIM
If the lost device is a phone, contact your carrier through official channels. Ask about suspending the SIM, replacing it, adding a carrier PIN, and preventing unauthorized porting.
Phone number control can affect SMS codes and account recovery.
Check exposure and monitor alerts
If your email or username appears in exposure data, be alert for phishing that uses the device loss as a pretext. A clean result does not guarantee safety.
Monitor account alerts for several weeks and do not approve sign-in prompts you did not start.
Frequently asked questions
Can someone use my passkeys if they find my phone?
Usually they need to unlock the device, but risk rises if the device was unlocked or the PIN is known.
Should I remove the lost device from accounts?
Yes, remove or revoke it from important account security settings where possible.
Do I need to change every password?
Prioritize accounts that were accessible on the device, especially email, banking, cloud storage, and work accounts.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.