How do I get back into an email account I am locked out of?

Email is the reset route for everything else, which makes losing it uniquely disruptive and makes providers uniquely cautious about giving it back. The process is deliberately slow because it is the same door an attacker would use.

Safety

Step by step

1. Try from a device and network you have used before.Genuinely important. Recovery systems weigh whether the request comes from a recognised device, browser and location. The same laptop on your home wifi is far more likely to succeed.
2. Use the provider's recovery page, nothing else.Go to the provider's site directly by typing the address. Third-party "account recovery" services are scams or credential harvesters without exception.
3. Work through the recovery options in order.Recovery email, recovery phone, security questions, then the manual identity questionnaire. Each is slower than the last.
4. Answer everything you can on the questionnaire.Approximate dates are better than blanks. When you created the account, frequently emailed contacts, folder names, subject lines you remember, services linked to it. Partial answers accumulate.
5. Be patient and try more than once.It can take days and multiple attempts. Each attempt can include more information as you remember it. Do not conclude it has failed after one try.
6. If it was hacked rather than forgotten, act fast.Check whether it has been used to reset other accounts. Change the passwords on your bank, and anything important, from a different device immediately — do not wait for the email recovery.
7. Warn your contacts.A compromised email account is used to scam the people in it. A message from another channel prevents real harm to other people.
8. Set recovery up properly once you are back in.A recovery phone and a recovery email you can actually access, two-factor authentication, and backup codes printed and stored offline.

Tips

• Set up a recovery email at a different provider. Recovery pointing at another account with the same company is a single point of failure.
• Print your backup codes and keep them with your passport. It converts a multi-day recovery into a thirty-second one.
• Check the account's forwarding rules and filters after regaining access. Attackers routinely set up quiet forwarding that survives a password change.

Questions people ask