Guide
Lost access to the phone number you use for 2FA: what happens and what to do
Numbers get lost in ordinary ways: a prepaid line lapses, you move abroad, a carrier recycles the number, or a temporary number you used at sign-up reaches the end of its window. The account keeps working until the day it asks for a code. What happens next depends almost entirely on what you set up before. This guide goes service by service through what Google, Microsoft, Apple, Discord, Telegram and WhatsApp can and cannot do for you, based on their help centers as of October 2026, and ends with the setup that makes a lost number a non-event.
By TempSMSVerifyPublished
Quick answer
What happens if you lose access to your 2FA phone number?
You can still sign in with any other factor you set up: backup codes, an authenticator app, a passkey, a security key or a signed-in device. Without one, you depend on each service's recovery process, which takes days at Google and Apple and is impossible at Discord without backup codes. Telegram and WhatsApp stay tied to the number itself.
Step by step
- 1
Do not sign out of anything
A device still signed in is often your fastest way back. Do not reset it during recovery.
- 2
Try to get the number back first
If the number was a carrier line in your name, ask the carrier for a replacement SIM with the same number. Telegram's FAQ gives this as the first step.
- 3
Sign in with another factor
Look for 'Try another way' or 'Use a backup code' on the code screen. Backup codes, authenticator apps, passkeys and security keys all bypass SMS.
- 4
Start the official recovery process
If no other factor works, use the service's recovery form from its own help center. Do not pay third parties who promise recovery.
- 5
Replace the number as soon as you are in
Add a number you control, an authenticator app and a recovery email, then generate new backup codes and store them offline.
What can each major service do without the number?
Read your service's row before starting recovery; some processes, Apple's in particular, are slowed down by doing the wrong thing in the meantime.
| Service | Options without the number | If nothing else works |
|---|---|---|
| Another phone signed in to the account, saved backup codes, a security key, a passkey, a trusted device | Account recovery; Google Account Help says it can take 3 to 5 business days | |
| Microsoft | Authenticator app, other security info, the 25-character recovery code | Account recovery form; Microsoft says it reviews answers and responds within 24 hours |
| Apple | Another trusted device, a recovery contact, a recovery key, the account email | Account recovery with a fixed waiting period of 'several days or longer' |
| Discord | Unused backup codes; SMS backup if it was set on a number you still have | None: Discord says it cannot remove MFA or issue new backup codes |
| Telegram | A login code sent inside Telegram to another active session | Get the number back from the carrier; Telegram identifies users only by number |
| Linked devices keep working for a while; the two-step PIN protects against takeover | Re-registration needs the same number; recover the SIM or start a new account |
How do Google and Microsoft handle a lost number?
Google's 'Fix common issues with 2-Step Verification' page lists the alternatives in order: 'another phone signed in to your Google Account', 'a backup code you previously saved', 'a hardware security key you've added', 'a passkey created on another device', and signing in from a device you previously marked as trusted. Google gives each account 10 backup codes of 8 digits. Without any of those, account recovery can take 3 to 5 business days, Google warns.
Microsoft treats the phone as one item of security info among several. If you have the Microsoft Authenticator app, another email or phone, or the 25-character recovery code, you can sign in and replace the lost number. Our requirements index also notes, from Microsoft's support pages, that replacing all security info at once starts a 30-day hold. Without any of those, Microsoft's account recovery form is the route; Microsoft says it 'will review your answers and respond within 24 hours'.
What about an Apple Account?
Apple's first question is whether you still have a trusted device, any iPhone, iPad or Mac already signed in to your Apple Account. If you do, you can change the password and trusted number from it and may not need recovery at all. Apple also accepts a recovery contact's 6-digit code or a recovery key set up beforehand.
Without those, Apple's account recovery applies. Apple's support page 'What to expect during account recovery' says recovery 'might take several days or longer', that you get a confirmation within 72 hours, and that 'contacting Apple Support can't help shorten the wait. The waiting period is fixed.' One detail catches people out: using a signed-in Apple device during the wait cancels the recovery request. If you started recovery, leave your other Apple devices alone until it completes.
Why are Discord, Telegram and WhatsApp stricter?
Discord is blunt. Its help center article on recovering an account when locked out of MFA says that if you do not have your backup codes, 'Discord is unable to remove MFA or issue you new backup codes'. If you added SMS as a backup method and still have that number, you can use it; if the phone number is the thing you lost, only backup codes remain. Discord also refuses VoIP and temporary numbers for that reason.
Telegram and WhatsApp use the number as the identity. Telegram's FAQ states that 'the phone number is the only way for us to identify a Telegram user at the moment … whoever has the number, has the account', and its first advice for a lost phone is to contact the carrier so they 'block your old SIM and issue a new one with your number'. If Telegram is still open on another device, it may send the login code there instead of by SMS, but Telegram warns that this 'should not be considered an alternative to using an up-to-date phone number'. While you still have access, Settings, Change number moves everything to a new number.
WhatsApp also needs the same number to register on a new phone. Linked devices, up to four, keep working while the main phone is in use at least every 14 days. The two-step PIN will not get you back in without the number, but it stops a future holder from registering your account. If the number is gone for good, the realistic outcome on WhatsApp and Telegram is a new account.
What if the lost number was a temporary number?
Then the loss was scheduled. A TempSMSVerify number is reserved for up to 20 minutes and then released; nobody can reclaim it, and the next holder may be a stranger. That is fine for an account you secured on day one, and a problem if the number is still its only recovery method.
If you can still sign in, add an authenticator app or passkey, save new backup codes, add a recovery email and replace the number. If you cannot, follow the service's row in the table above. For apps that tie the account to the number, such as Telegram, WhatsApp, Signal and Hinge, the account was effectively temporary too. Our /blog/can-i-reuse-a-temporary-number guide explains what happens to the number after expiry.
How do you make sure a lost number never locks you out?
Set up at least two factors that do not depend on a phone number, and keep one offline. NIST SP 800-63B-4 (August 2025) classifies SMS and voice authentication as restricted, partly because numbers change hands; treat the phone as a convenience, not your only key.
- Backup codes for every account that offers them, printed or in a password manager, not as a screenshot on the same phone; see /blog/2fa-backup-codes.
- An authenticator app or passkey as the main second factor; keep the authenticator's own backup or a second device enrolled.
- A recovery email you control, ideally on a different provider from the account you are protecting.
- Apple: a recovery contact or key. Google: a second signed-in device. Microsoft: the recovery code. Telegram and WhatsApp: a two-step password or PIN with a recovery email.
- Before you change carriers or move abroad, update the number on every account while the old one still works.
FAQ
FAQ
Can I recover my Google account without my phone number?
Usually, if you prepared. Google accepts another signed-in phone, a saved backup code, a security key, a passkey or a trusted device. Without any of them, the account recovery flow asks questions to confirm ownership, and Google Account Help says it can take 3 to 5 business days. Sign in from a device and place you have used before.
How long does Apple account recovery take?
Apple says it 'might take several days or longer', with a confirmation within 72 hours, and that support cannot shorten the fixed waiting period. Using a signed-in Apple device during the wait cancels the request. If you still have a trusted device, a recovery contact or a recovery key, you can usually skip account recovery entirely.
Can Discord support remove 2FA if I lost my phone?
No. Discord's help center says that without backup codes it 'is unable to remove MFA or issue you new backup codes', and support cannot generate them for you. If you set SMS as a backup on a number you still have, you can use that. Otherwise the account is effectively lost, which is why saving backup codes matters.
What happens to my Telegram account if I lose my number?
Telegram's FAQ says the number is the only way it identifies a user, so whoever has the number has the account. Contact your carrier for a replacement SIM with the same number. If Telegram is open on another device, you may receive the login code there. While you still have access, use Change number to move the account.
Someone else got my old number. Can they get into my accounts?
They can receive SMS codes sent to it, so any account that still allows SMS-only recovery is at risk. Change the number on your accounts, switch to authenticator apps or passkeys, and set two-step PINs on WhatsApp and Telegram. US carriers must age disconnected numbers at least 45 days before reassigning them, so act early.
I used a temporary number at sign-up. Am I locked out?
Not if you added another factor. A temporary number is released after its window, so it will not receive future codes. If you can still sign in, add an authenticator app, backup codes and a recovery email now, then remove the number. If you cannot, use the service's official recovery process as for any lost number.