Using a Google passkey does not remove the need to check your recovery email, recovery phone number, and alternative ways to sign in. Adding a passkey leaves existing recovery methods in place, but it does not update an old phone number or prepare backup codes for you. Check what you can actually access before losing your phone.
On this page
This guide is for personal Google Accounts. Work, school, child, and Advanced Protection Program accounts may offer different settings.
A working passkey on your phone is only one check
A passkey lets you sign in by unlocking your device. That makes the device you create it on important. Create passkeys only on devices you personally own and use. Avoid shared devices that family members or colleagues can also unlock.
Separate two questions: can you sign in now, and could you get into the account without this phone? An account that opens normally on your current phone does not establish that you are prepared for its loss.
There is no need to sign out of every device to test this. Start by keeping your accessible sessions open while reviewing the settings. Google’s passkey guide explains how passkeys work alongside other sign-in methods.
Are your recovery email and phone number still usable?
Open Security & sign-in in your Google Account and review your recovery information. Check more than whether the fields contain something: can you open that email account, and do you still use that phone number?
Your recovery email should differ from the address you use to sign in to this Google Account. If you can open the recovery mailbox only on the phone you might lose, reconsider how you would reach it. A recovery phone number and a number used for 2-Step Verification serve different purposes. Checking one does not establish that the other is ready.
You cannot add recovery information while locked out or going through account recovery. Google also says verification codes may still be sent to previous recovery information for up to 7 days after a change. Review the official recovery options guidance and make changes while you still have access, rather than waiting until they are urgent.
Keep backup codes accessible without the phone
With 2-Step Verification enabled, you can create codes under Security & sign-in → 2-Step Verification → Backup codes. They provide an alternative when you cannot use other verification methods. Availability is not identical for every account: accounts in the Advanced Protection Program cannot download backup codes.
Decide where to keep the codes after creating them. If the only copy is in that account’s cloud storage, being locked out may also stop you from reaching the code file. Consider a secure printed copy or another safe location you can access without that phone or account.
| What to check | Why it matters |
|---|---|
| You have the latest code set | Creating a new set of 10 codes invalidates the previous set |
| Used codes are marked | Each code becomes inactive after it is used |
| Only you can access the storage location | The actual code values must not be disclosed to other people |
Do not paste codes into comments or support requests. Keep them out of screenshots you share when asking about settings. Google’s backup code help covers the conditions for creating and using them.
Keep existing methods while checking another device
You can also review the sign-in methods available on another personal device. Do not remove all your previous methods simply because you have created a new passkey. Google says a newly created passkey may take up to 7 days to become available at sign-in.
The purpose of this check is to establish what you could use if your phone disappeared. There is no need to reduce the number of available methods as part of that check.
Review the passkey list for unfamiliar devices or devices you no longer use, but avoid deleting everything when you are unsure which device an entry represents. Keep track of the methods you can still access before changing the list.
If your phone is already lost
If you cannot use a passkey at sign-in, choose Try another way and review the methods offered. The choices depend on the account’s current state. Every method you have seen before may not appear. If you cannot regain access, follow Google’s official account recovery process.
If another device still gives you access, check how to remove the passkey associated with the lost phone. Automatically created Android passkeys and manually created passkeys have different removal procedures. Follow the relevant section in Google’s official passkey help. Removing a passkey is not the same as deleting the account.
A recovery email or backup code does not guarantee that recovery will succeed in every situation. Checking valid methods before a loss does, however, help you understand what to try if access becomes difficult.
Official sources
- Google: Sign in with a passkey instead of a password
- Google: Set up recovery options
- Google: Sign in with backup codes
Official sources checked on September 18, 2026. Menus and available authentication methods can vary by account type and account status.