How to regain access to your email
If you cannot log in to your email account, the fastest path back in depends on why you are locked out. Most email providers — Gmail, Outlook, Yahoo, and others — let you reset your password using a recovery email address or phone number you set up earlier. If you do not remember your password but still have access to that recovery email or phone, you can usually regain access in minutes. If you have lost access to both your password and your recovery methods, the process takes longer and requires you to prove your identity to the provider.
The steps differ slightly between Gmail, Outlook, Yahoo, and other providers, but the underlying logic is the same: the company needs to confirm you own the account before letting you back in. This protects your account from someone else taking it over, but it also means you may need to answer security questions, provide a government ID photo, or wait for a manual review.
Key Takeaways
- If you remember your password but cannot log in, your account may be temporarily locked for security reasons — wait a few hours or check for suspicious activity alerts from your provider.
- If you forgot your password, use the "Forgot password" link on the login page and follow the recovery steps using your backup email address or phone number.
- If you no longer have access to your recovery email or phone, you will need to verify your identity through security questions, a government ID photo, or other proof the provider accepts.
- Recovery time ranges from minutes (if you have a recovery method) to several days (if the provider must manually review your identity).
- Setting up a recovery email and phone number now prevents this problem in the future — most providers let you add or change these in account settings.
If you forgot your password
Go to the login page for your email provider and click the "Forgot password?" or "Can't access your account?" link. The provider will ask you to enter your email address, then send a reset link to your recovery email address or a code to your recovery phone number.
Open that email or text message and follow the link or enter the code. You will then create a new password. Make it something you have not used before and something you can remember — or write it down somewhere safe, like a password manager or a locked drawer. Once you set the new password, you should be able to log in when ready.
If you do not receive the recovery email or text within a few minutes, check your spam folder or junk mail. If it is not there, the recovery email address or phone number on file may be outdated or incorrect.
If you do not have access to your recovery email or phone
If the recovery email address no longer works (because you closed that account or lost access to it) or the phone number is no longer yours, you cannot use the standard password reset. Instead, click "Forgot password?" and look for a link that says "I can't access my recovery email" or "Verify your identity another way." Different providers word this differently.
The provider will then ask you to prove you own the account. This usually means answering security questions you set up when you created the account — questions like "What is your mother's maiden name?" or "What was the name of your first pet?" If you do not remember your answers, or if you never set up security questions, the provider may ask for a government ID photo, a credit card, or other identifying information.
Some providers, including Google and Microsoft, let you upload a photo of your ID directly through the recovery page. Others require you to contact their support team, which can take one to three business days. Check your provider's help page for the exact steps — search "[Your provider] account recovery" to find it.
If your account is locked for security reasons
Sometimes your provider locks your account temporarily even if you know your password. This happens when the system detects unusual activity — someone trying to log in from a new location, multiple failed login attempts, or suspicious forwarding rules. You will usually see a message saying your account is locked or asking you to verify your identity.
If you see this message, click the link to verify your identity. The provider will send a code to your recovery email or phone. Enter that code, and your account should unlock within minutes. If you do not receive the code, wait a few hours — sometimes the system needs time to process the unlock request.
After you regain access, check your account activity and security settings. Look for any forwarding rules you did not create, any devices you do not recognize, or any recent password changes. If you see something suspicious, change your password again and enable two-factor authentication if you have not already.
Setting up recovery methods to prevent future lockouts
Once you are back in your account, add or update your recovery email and phone number so you do not face this problem again. In Gmail, go to myaccount.google.com, click "Security" on the left, and scroll to "How you sign in to Google." In Outlook, go to account.microsoft.com, click "Security" at the top, and look for "Recovery info." In Yahoo, go to account.yahoo.com, click "Account security," and add a recovery email and phone.
Use a recovery email address you actually check regularly — not an old account you abandoned. If you use a phone number, make sure it is one you plan to keep for at least a few years. Some providers also let you add backup codes — a list of one-time codes you can use to log in if you lose access to your recovery methods. Save these codes somewhere safe, like a password manager or a printed list in a locked drawer.
Two-factor authentication adds another layer of protection. Even if someone gets your password, they cannot log in without a code from your phone or an authentication app. Most providers offer this as an optional security feature in the same settings where you add recovery methods.
What to do if your email account has been taken over
If you cannot log in and you suspect someone else has access to your account — because you see unfamiliar activity, forwarding rules you did not create, or password changes you did not make — act quickly. Go to your provider's account recovery page and select "I think my account has been hacked" or similar language. This usually moves your case to the front of the queue.
While you wait for recovery, check your other accounts. If you used your email address to sign up for banking, social media, shopping, or other services, change the passwords on those accounts too. Use a different password for each one. If your email was compromised, someone with access to it can reset passwords on any account that uses that email address.
After you regain access to your email, change your password, review your recovery methods, and enable two-factor authentication. Check your account activity log to see what happened and when. Most providers let you sign out all other sessions from the security settings, which forces anyone else out of your account.
Frequently Asked Questions
How long does it take to recover a locked email account?
If you have access to your recovery email or phone, you can reset your password and log back in within minutes. If you need to verify your identity through security questions or an ID photo, recovery usually takes a few hours to one business day. If the provider must manually review your case, it can take two to five business days.
Can I log in from a different device if I am locked out?
No. The lockout applies to your account, not to a specific device. You cannot bypass it by using a different computer, phone, or browser. You must go through the recovery process on any device.
What if I set up a recovery phone number but no longer have that phone?
You can still use the recovery email address if you have access to it. If you do not have access to either the recovery email or phone, you will need to verify your identity through security questions or a government ID. Update your recovery methods as soon as you regain access so you do not lose access again.
Do I need to do anything special if I use two-factor authentication?
During account recovery, you will not need your two-factor code because you are proving your identity through other means — recovery email, phone, or security questions. Once you log back in, two-factor authentication will work normally again.
Should I change my password after I regain access?
Yes, especially if someone else may have had access to your account or if you used a weak password before. Create a new password that is at least 12 characters long and includes uppercase letters, numbers, and symbols. Avoid using the same password across multiple accounts.