I’ll be honest, losing your phone is a nightmare. I dropped mine in a taxi last year and for a good 10 minutes I just froze — I couldn’t think straight. That’s when I started wondering, what happens to passkeys if you lose your phone?And if you’re like most people, your phone isn’t just for calls anymore. It’s your email, your Instagram, your banking apps, everything.So if you saved passkeys on that phone, the first thing that pops into your head is, did I just lose all my accounts too?The good news is, losing your phone doesn’t automatically mean you lose your accounts. It really comes down to where you saved those passkeys.If they were syncing through your Google Account or iCloud Keychain, you can still get them on another device. If they were only stored on that one phone, you’ll need to use a recovery option.So in this guide, I’ll walk you through what really happens to your passkeys when you lose your phone, and what you should do right now to secure your accounts and get back in.
What Happens to Passkeys If You Lose Your Phone?
The outcome depends on how you created and stored your passkeys
A passkey may be stored on a single device or managed by a credential provider that syncs it across supported devices These arrangements affect whether you can continue signing in after losing your phone.
Here are the main possibilities:
- Your passkeys sync across devices You may be able to access them from another supported device using the same credential provider and account.
- Your passkeys are stored only on the lost phone You may need another sign-in method or the website’s account recovery process.
- Your phone is stolen: You should secure your accounts and remove or revoke credentials associated with the lost device where the service provides that option.
- You have another registered sign-in method You may be able to sign in with another passkey, a security key, a password, or an available account recovery option.
Not every website handles passkeys in exactly the same way. Losing one device does not automatically delete your online accounts, but you should not assume that every passkey is backed up or available elsewhere.
Are Passkeys Lost Forever When You Lose Your Phone?
No. Losing your phone does not necessarily mean your passkeys are permanently lost.
If your passkeys are synchronized through a supported credential manager, they may remain available on your other approved devices. For example, Apple iCloud Keychain keeps passwords and passkeys up to date across supported Apple devices when syncing is enabled.
If a passkey exists only on the lost device, you may need to use another sign-in method or recover your account through the relevant website or app.
It is important to understand that passkey recovery and account recovery are not the same thing. Recovering access to your Google or Apple Account does not guarantee that every passkey stored locally on a lost device will be restored
Your options depend on the credential provider, the service you are accessing, and the recovery arrangements you established before losing your phone
What to Do Immediately After Losing Your Phone
If your phone is missing, take the following steps to protect your accounts and prepare for recovery.
1. Secure Your Lost Phone
Use your phone manufacturer’s official device-finding service to locate the phone or activate its available security features.
For an iPhone, use Apple’s Find My service if it was configured before the phone went missing For an Android phone, use Google’s Find Hub where supported.
If you believe the phone was stolen, consider remotely locking it. If the circumstances justify it, remote erasure may also be an option. Understand the consequences before erasing the device, especially if it contains information you have not backed up
Do not assume that a remote lock or erase automatically removes every passkey registered with every online service.
2. Secure Your Main Email and Important Accounts
Your primary email account is often important for account recovery and security notifications.
From a device you trust, review your email account’s security settings and check for unfamiliar devices or sessions. Follow the provider’s official instructions to sign out or remove access where appropriate.
Prioritize accounts that contain sensitive information, including:
- Your primary email account
- Financial and payment services
- Cloud storage
- Social media accounts
- Work-related accounts
- Password managers and credential providers
If you suspect someone may be able to unlock your missing phone, treat the situation as a potential account-security incident.
3. Remove the Lost Device’s Passkey Where Necessary
For your Google Account, Google provides a way to remove a passkey associated with a lost or stolen device from another accessible device.
Open your Google Account’s passkey settings:
https://myaccount.google.com/signinoptions/passkeys
After signing in and completing any required identity verification, find the relevant passkey and remove it.
Google also explains that passkeys automatically created by an Android device may require you to remove the device from your Google Account under Security → Your devices → Manage all devices and sign out.
If you use a separate password manager, check its documentation too Removing a passkey from one account’s settings may not remove a separate copy stored in a credential manager.
For other websites and apps, follow their own instructions for reviewing registered passkeys and revoking access.
4. Check Your Available Sign-In Options
Once your accounts are secure, try signing in from a trusted device.
Depending on the service, you may be able to use:
- Another passkey available through a synced credential manager
- A passkey registered on another device
- A password, if the service still offers password sign-in
- A registered hardware security key
- Another supported verification or account recovery method
Google’s official guidance specifically recommends selecting Try another way when a passkey is unavailable, so you can return to other sign-in options offered for your account.
Do not assume that every service supports all these methods Follow the options actually provided by the service you are trying to access.
How Google Passkeys Work After You Lose Your Phone
Google provides specific instructions for handling a lost device that contains a passkey for your Google Account.
You can use another device to sign in to your Google Account and remove the passkey associated with the missing phone. If the passkey was automatically created by your Android device, Google provides separate instructions for removing the device from your account.
Google also notes that if you remove a passkey from your Google Account but are still prompted to use it, you should check whether a third-party credential manager has a separate copy.
This distinction matters because a passkey associated with your Google Account and a passkey stored in a separate credential manager may need to be managed in different places.
Official source: Google Account Help — Sign in with a passkey
How Apple Passkeys Work After You Lose Your iPhone
Apple supports passkey syncing through iCloud Keychain. When it is enabled, passwords and passkeys can stay up to date across your approved Apple devices.
If you lose one iPhone but still have access to another device using your iCloud Keychain your synchronized credentials may remain available there.
Apple also documents recovery options for situations in which all your devices are lost or stolen. Depending on your setup, recovery may involve a recovery contact or Apple’s iCloud Keychain recovery process.
The recovery process can require authentication with your Apple Account, a verification code sent to a trusted phone number, and the passcode of a device. Apple’s documentation describes additional security restrictions for this process.
These options do not mean every passkey is guaranteed to be recoverable in every situation. Your actual recovery options depend on your configuration and Apple’s applicable requirements.
If your iPhone is missing, use Apple’s official guidance to secure the device and review your account access.
Official sources:
Can Someone Use Your Passkeys If They Steal Your Phone?
A stolen phone does not automatically give someone access to every account protected by passkeys. However, the risk depends on whether the person can unlock the device and whether additional security protections are enabled.
Passkeys commonly rely on a device’s screen lock, such as a PIN, fingerprint, or face recognition. Google explains that biometric information used for passkey sign-in stays on the device and is not shared with Google.
If someone cannot unlock your phone, using a passkey stored on that device is generally more difficult. Nevertheless, you should not rely on the screen lock alone if the phone has been stolen.
Take these precautions:
- Lock or erase the phone remotely where appropriate and supported.
- Remove the lost device’s passkeys from important accounts when possible.
- Review account sessions and sign out unfamiliar devices.
- Change account passwords if you suspect they have been exposed or misused.
- Contact your mobile carrier if you need to suspend your SIM or protect your phone number.
- Review recovery email addresses, trusted phone numbers, and other security settings.
If you suspect unauthorized access, follow the affected service’s official security instructions promptly.
What If Your Passkeys Do Not Sync to Your New Phone?
Getting a new phone does not guarantee that every passkey will appear automatically.
First, identify where the missing passkey was stored. It may have been saved in iCloud Keychain, Google Password Manager, another credential manager, or directly on a device that does not support syncing.
Next, check the relevant provider’s official instructions.
For iCloud Keychain, confirm that you are using the correct Apple Account and that Passwords & Keychain syncing is enabled on the new device. Apple may require you to approve the additional device or complete its recovery process.
For Google, sign in to the correct Google Account and check the available passkeys and sign-in options. If the passkey is unavailable, use another offered sign-in method.
If the passkey was device-bound and cannot be restored, visit the website or app where you originally registered it. Complete the service’s account recovery process and register a new passkey after regaining access, if supported.
Avoid deleting the only remaining copy of a credential manager’s data until you understand how its recovery and synchronization work.
How to Prepare for Future Phone Loss
You can reduce the disruption caused by losing a phone by preparing before anything happens.
Keep Your Recovery Information Updated
Check that your important accounts have current recovery email addresses and phone numbers. Store backup codes securely when a service provides them.
Recovery options vary by service, so confirm that you can actually use the methods listed in your account settings.
Understand Where Your Passkeys Are Stored
Know which credential manager you use and whether your passkeys sync between devices.
Do not assume that a passkey saved on one phone is automatically backed up to your Google Account, Apple Account, or every other device.
Set Up Another Sign-In Method Where Supported
For important accounts, consider registering another passkey on a trusted device or adding a compatible hardware security key.
Only register credentials on devices you control. Keep backup security keys and recovery codes in a secure location separate from your everyday phone.
Protect Your Phone With a Strong Screen Lock
Use a strong device passcode and enable available security features. Biometrics can make routine sign-in convenient, while the device passcode remains important for device security and certain recovery processes.
Review Your Accounts Periodically
Occasionally check your account’s registered passkeys, trusted devices, and active sessions. Remove old devices and credentials you no longer use when the service provides that option.
These steps cannot eliminate every risk, but they can make it easier to secure your accounts and recover access if your phone goes missing.
Frequently Asked Questions
1. What happens to passkeys if you lose your phone?
Losing your phone does not automatically mean losing access to every account protected by passkeys. If your passkeys sync through a supported credential manager, you may be able to access them on another compatible device. If a passkey is stored only on the lost device, you may need another sign-in method or the website’s account recovery process.
2. Can I recover my passkeys on a new phone?
Yes, in some situations. If your passkeys are synchronized through a credential provider, they may become available after you set up that provider on your new phone and complete any required verification. Device-bound passkeys may not transfer, so you might need to recover access through the website or app where the passkey was registered.
3. How do I remove a passkey from a lost phone?
For a Google Account, sign in from a device you can access, open your Google Account’s passkey settings, and remove the passkey associated with the lost device. Google provides separate instructions for passkeys automatically created by Android devices. For other accounts, follow the relevant service’s instructions for removing registered passkeys.
Official guide: https://support.google.com/accounts/answer/13548313
4. Can someone access my accounts if they steal my phone?
A stolen phone does not automatically give someone access to all your passkey-protected accounts. The risk depends on whether they can unlock the device and access your credentials. Remotely lock the phone if possible, review important account sessions, and remove or revoke credentials associated with the lost device where supported.
5. Do passkeys sync automatically to a new phone?
They can, but it depends on the credential provider and your settings. For example, Apple’s iCloud Keychain can keep passwords and passkeys up to date across approved Apple devices when syncing is enabled. Other providers have their own requirements. Passkeys stored only on a particular device may not sync.
Official guide: https://support.apple.com/en-in/guide/iphone/iph82d6721b2/26/ios/26
6. What happens to Apple passkeys if I lose my iPhone?
If iCloud Keychain is enabled and you have another approved Apple device, your synchronized passkeys may remain available there. Apple also documents recovery options if all your devices are lost or stolen. Recovery can require Apple Account authentication, a trusted phone number, and a device passcode, depending on the situation.
7. What should I do first after losing a phone with passkeys?
First, use the official device-finding service to locate or secure your phone. Then protect your primary email and important accounts, review active sessions, and remove credentials associated with the lost device where necessary. Check whether your passkeys are synced and use the official recovery process for any account you cannot access.
Final Thoughts
Losing your phone does not automatically mean losing access to every account protected by passkeys. If your credentials sync through a supported provider, you may be able to use them on another approved device. If a passkey is tied to the missing device, you may need to remove it, use another sign-in method, or recover your account.
The most important steps are to secure the missing phone, protect your primary accounts, review registered credentials, and follow the recovery instructions provided by the relevant service.
Preparing recovery methods before you lose a device can make the process much easier. Passkeys can provide strong protection against phishing, but understanding where they are stored and how to recover your accounts remains essential.
Official references used
- Google Account Help — Manage passkeys, lost devices & sign-in recovery
https://support.google.com/accounts/answer/13548313
- Apple Support — Make passwords and passkeys available across your devices (iCloud Keychain)
https://support.apple.com/en-in/guide/iphone/iph82d6721b2/26/ios/26
- FIDO Alliance — What are Passkeys & How They Work
