Restore access after a lost or shared device

If you lost a laptop or a shared PC was reused, the fix is to sign in from a trusted device, change the password, and revoke other sessions before anyone else can use the old one. If you still have a recovery email, phone number, backup code, or another signed-in device, use that to get back in. If those recovery options are gone or someone already changed the account, use the provider’s account recovery flow right away.

Symptom

You cannot sign in on the lost laptop or reused shared PC, or the account still looks signed in there after someone else may have used it.

This usually shows up after a device is lost, left behind, or handed to another person, and you need to make sure the next user cannot keep using your account.

Before you start

This applies to the account’s web or app sign-in and security settings on current versions of the service you use, whether you are on Windows, macOS, or a browser on another trusted device. You do not need administrator or sudo access unless the provider specifically asks for it in its own recovery or security settings.

No restart is usually needed. If you can, keep a trusted phone or computer nearby, and have your recovery email, recovery phone number, backup codes, or authenticator app ready.

Safe checks first:

• Confirm you are on a device you trust, not the lost laptop or reused PC.
• If you still have any signed-in device, use that first to review security settings before trying random sign-in methods elsewhere.

What you should do first if the device is lost or reused

Use a device you trust, not the lost laptop or the shared PC. If you can still reach your account from a phone, another computer, or a browser you know is yours, start there and protect the account before you try to make things convenient again.

The order matters. First lock down access, then clean up old devices, then fix recovery options. If you log in on the reused machine first, you may leave a fresh session behind for the next person to use.

Before you begin, have these ready if you can:

• A trusted phone or computer
• Your recovery email or phone number
• Any backup codes you saved earlier
• Access to your authenticator app, if you use one

If you do not have any trusted device or recovery method left, skip ahead to account recovery. Do not keep trying random sign-in methods on the old device; that can waste time and may help the wrong person if the session is still active.

Can you still get back in if the old device is gone

In many cases, yes. A lost laptop or a reused shared PC does not automatically mean the account is gone. You may still get back in if you can confirm your identity through a recovery email, recovery phone number, backup codes, or another device that is already signed in.

The best sign that recovery is still possible is that you still control at least one trusted recovery path. For example, if the account can send a code to your phone number or recovery email, use that from a device you trust. If you still have a signed-in phone or tablet, use it to change security settings before the old device can be used again.

You usually need account recovery if:

• You no longer control the recovery email or phone number
• Your backup codes are gone
• The authenticator app was only on the lost device
• The password no longer works and the account says key details have changed

If recovery options are outdated but still in your control, update them only after you are back in. If they’re missing or no longer yours, go straight to the provider’s recovery flow.

Reset the password from a trusted device

Change the password from a device you trust as soon as you can. That is usually the fastest way to cut off a shared or stolen session, especially if the old device was still signed in.

1. Open the account’s security or sign-in settings from your trusted device.
2. Choose the password change or password reset option.
3. Set a new password you have not used on the lost or shared device.
4. Save it somewhere safe if you use a password manager.

Account settings > Security > Password

The new password should be strong and unique. Do not reuse anything that was stored in the browser on the old PC, and do not pick something you already used on that device for another account. If the password change works, you should be asked to sign in again on other devices. If it does not, or if you cannot reach the password page, the account may already be controlled by someone else or the provider may require recovery first.

Sign out of other devices and remove the old PC

After the password change, revoke other sessions right away. This closes the door on anyone who is still signed in from the lost laptop or the reused shared PC.

1. Open the security page where active sessions or signed-in devices are listed.
2. Review the devices and sign-in locations.
3. Choose the option to sign out of all other sessions, or sign out of the lost/shared device if the account lets you remove devices one by one.
4. Remove the old PC from the account’s trusted or remembered devices list, if that setting exists.

Account settings > Security > Devices or Active sessions

The expected result is that the old device disappears from the list or shows as signed out. If the device still appears as active after you sign out, wait a few minutes and refresh the page. If it still remains active, change the password again and check whether there is a separate “sign out everywhere” or “revoke sessions” control. Some services keep local browser data until the next sync, but the account session should no longer be valid.

Check your recovery email, phone number, and backup codes

Once access is back under your control, check the recovery methods before you need them again. A lost or shared device problem often exposes old recovery details that were never updated.

Make sure the recovery email belongs to you and is still checked regularly. Confirm the recovery phone number is current and can actually receive texts or calls. If the account uses backup codes, verify that you still have the current set and that they were not stored on the lost device.

Update any stale detail now, while you are already signed in. If you change a recovery email or phone number, expect the service to ask you to confirm the change through a code or approval step.

If you find an old recovery address you no longer control, remove it. If you find backup codes saved only on the lost laptop, treat them as exposed and replace them with a fresh set if the service allows that.

Turn two-step verification back on the safe way

If you use two-step verification, turn it back on after the password change and session cleanup. If the old authenticator app lived only on the lost device, do not wait too long to replace it.

1. Open the account’s security settings.
2. Add or confirm a recovery phone number or email first if the service asks for one.
3. Set up two-step verification again.
4. Choose a method you can still reach, such as an authenticator app on a current phone, security key, or text message if that is the only option available.
5. Save new backup codes if the service provides them.

Account settings > Security > Two-step verification

If the authenticator app was on the lost device and you no longer have it, you may need to use a backup code or recovery method to finish setup. If the service says two-step verification is already on but you cannot approve prompts, look for an option to replace the authenticator device or to reset 2FA through recovery. Do not remove the old method until the new one is working.

Make sure no one else still has access

Confirming access means checking that the account is yours again, not just that you know the password. Review recent sign-in activity and make sure the old device sessions are gone.

Look for these signs:

• Recent sign-ins show only your trusted device or locations you recognize
• The lost or reused PC no longer appears in active sessions
• Password change alerts have been sent to your recovery email or phone
• No unfamiliar forwarding rules, recovery details, or app passwords were added

Account settings > Security > Recent activity or Sign-in activity

If you see a sign-in you do not recognize, treat it as a live access path. Change the password again from your trusted device, sign out of all sessions, and review recovery settings one more time. If the account offers notifications for new sign-ins, turn them on. If your service has connected apps or mail forwarding, check those too, since a former session may have left them behind.

If recovery fails or someone changed the account first

If your recovery details are outdated, missing, or already changed, use the provider’s account recovery flow from a trusted device. That process usually asks for proof that you control the account, such as previous passwords, recovery email access, or other sign-in history.

Prepare anything that can help the provider verify you:

• Old passwords you remember
• Access to any recovery email or phone you still control
• Approximate dates the account was created or last used
• Any purchase receipts or billing details tied to the account, if relevant

If the account was changed by someone else, keep trying the official recovery form rather than guessing passwords. Repeated random attempts usually do not help and can slow you down. If there is a separate help flow for hacked or compromised accounts, use that. If you still control a trusted device that is signed in somewhere, use it to lock down sessions and update recovery details as soon as you regain access.

How to prevent this next time

Set up more than one recovery path now, while the account is healthy. Keep a current recovery email and phone number, and store backup codes somewhere you can reach even if your main device is gone.

Make it a habit to sign out of shared machines before you leave them, and check whether a browser saved your login on a borrowed or public PC. On your own laptop, avoid leaving the account open if someone else might use the device later.

A few simple habits help a lot:

• Keep recovery details current
• Save backup codes offline in a safe place
• Use two-step verification on a device you still control
• Review active sessions from time to time
• Remove old devices you no longer use

If you replace a phone or laptop, move your authenticator app and recovery access before wiping the old one. That way, losing or reusing a device is an inconvenience, not a lockout.

Conclusion

Use a trusted device or recovery method first, then change the password, revoke other sessions, and update your recovery options. If you cannot get back in that way, start the provider’s recovery flow now and do not keep trying on the lost or reused device.

Frequently Asked Questions

Should I try to sign in on the lost or shared device one more time?

No. Use a trusted device instead. Logging in on the old device can leave you with another active session or give the next user a fresh way in.

What if my authenticator app was only on the lost phone or laptop?

Use a backup code, recovery email, or recovery phone to get back in first. Then replace the authenticator setup and save new backup codes.

Do I need to change the password before signing out other devices?

Yes, in most cases that is the safest order. Change the password first, then revoke other sessions, then update recovery methods and two-step verification.