In short. Every email provider gets you back in through something you set up in advance: a recovery phone, a recovery email, a code you saved, a device where you’re still signed in. Without any of these, what’s left is a form where you prove the account is yours, and it doesn’t always work. Below are the steps for each provider, from its own help pages.
First: what not to do
- Don’t start recovery from a link in an email. Messages saying “recover your account” or “your mailbox is locked” are a common phishing trick. Open the recovery page yourself, from an address in this guide or a bookmark. How to spot a phishing email.
- Don’t pay “account recovery services”. Google says it doesn’t work with any service that claims to provide account or password support [1], and Microsoft’s support agents aren’t allowed to send password reset links [6].
- Don’t share passwords or codes. Google never asks for your password or verification codes over email, phone call or message [2].
Gmail
Checked against Google’s help on October 1, 2026 [1–4].
- Go to the account recovery page and follow the steps [2].
- If you can, use a computer, phone or tablet where you often sign in, the same browser, and a place where you usually sign in, like home or work [2].
- Answer as many questions as you can. If you’re unsure, take your best guess: wrong guesses won’t kick you out of the process, and there’s no limit to the number of attempts [1, 2]. If you don’t remember your last password, enter a previous one [2].
- When asked, choose a strong password you haven’t used with this account before [1].
- Forgot your address? To find your username, you’ll need the account’s recovery phone number or recovery email, and the full name on the account [1].
- “Google couldn’t verify this account belongs to you”. You can try again [2]. If you still can’t recover the account, Google suggests creating a new one [1].
- Work or school account. These steps might not work: ask your administrator [1].
- Changed your recovery info recently? It may take up to 7 days to take effect [1].
Outlook.com and Hotmail (Microsoft account)
Checked against Microsoft’s help on October 1, 2026 [5–7].
- On the Microsoft sign-in page, select Forgot password?; if that window is closed, use the Reset password link on Microsoft’s help page and enter your username [5].
- Choose where to get a verification code: your recovery email or phone. Retype the hinted part of the address or the last four digits of the number, select Get code, then enter the code and a new password [5].
- If you don’t recognize the options shown, or no longer have any of them, Microsoft points you to its Sign-in helper tool [5].
The account recovery form
If the reset doesn’t work, Microsoft has an account recovery form with questions only you should be able to answer [6]:
- A working email you can check. Microsoft sends the result there. It can be any active address, even a friend’s or relative’s [6].
- As much detail as you can. For Outlook.com and Hotmail, Microsoft asks about your contacts and email subject lines, and subject lines need to be exact. Old passwords help: list the ones you may have used [6].
- A familiar device and place, like the device you used to sign in, at home or at work [6].
Microsoft replies within 24 hours. If it can’t verify you, you can try again, up to two times a day [6].
- Two-step verification with no way to get a code. Microsoft says plainly that in this case it can’t help [6].
- A recovery code. If you saved Microsoft’s 25-digit recovery code, you can use it to get back in. If the account has two-step verification, changes after such a recovery take 30 days to take effect [7].
Yahoo Mail
Checked against Yahoo’s help on October 1, 2026 [8, 9].
- Go to Yahoo’s Sign-in Helper [8].
- Enter your recovery email, or select Use recovery phone number, and select Next [8].
- Follow the instructions [8].
If you’re still signed in to a Yahoo mobile app, you can set a new password there: profile icon, then Account Info (in Yahoo Mail: Manage Accounts, then Account), then Security, then Change password [8].
Yahoo is direct about the limit: if your recovery info is wrong or you can’t reach it, you may not be able to get back into the account [9].
Proton Mail
Checked against Proton’s help on October 1, 2026 [10, 11].
At Proton, getting back in and opening your existing emails can be two separate steps: a password reset, and then data recovery [11].
- On the Proton sign-in page, select Trouble signing in?, then Forgot password, and enter your email or username [10].
- Choose a recovery option you set up earlier: recovery email, recovery phone, recovery phrase or emergency contacts [10].
- Create a new password [10].
- After a reset by email or SMS you’re back in, but your existing emails and contacts may stay locked. To unlock them you need a data recovery method set up before the reset: a device where you’re still signed in, your recovery phrase, a recovery file, your old password, or help from a contact you set up for data recovery [10, 11].
- The recovery phrase resets the password and restores your data in one go [10].
- Without enough recovery options, Proton says you risk losing access to your account and data for good [11].
If nothing works
Sometimes access can’t be recovered: if the provider can’t confirm the account is yours, it won’t hand it over. The same check keeps someone else from taking your account. Then what’s left is a new address: tell the people who write to you, and change your email in the services you signed up for with the old one.
If your email was hacked
- You can’t sign in. Recover access with the steps above. Google’s recovery page is also for when someone else changed your password [3].
- You can still sign in. Change your password from a device you trust. Microsoft recommends scanning your computer for malware first, then checking forwarding and automatic replies [12].
What else to check, like forwarding rules you didn’t set up, is covered step by step in How to protect your email from hacking.
Prepare before you need it
- A recovery phone and email that are really yours. Keep them up to date: they’re how every provider above gets you back in. Changed your number? Update it in the account right away.
- A protected recovery email. Whoever gets into it can reset your main account, so it needs its own strong password, not the one your main mailbox uses, and a second sign-in step.
- Backup or recovery codes. Google gives you 10 backup codes for two-step verification, each works once; you can print them and keep them somewhere safe, like with your passport [4]. Microsoft’s recovery code is a single 25-digit code: print it, and don’t store it on a device you use to sign in [7]. Keep codes apart from your password and not in the same mailbox: without access to it, you won’t have the codes either.
- Set it up early. New recovery info doesn’t work right away: Google may take up to 7 days [1].
- A password manager. A long, unique password is hard to remember, and that’s the one people most often need to recover. A password manager remembers it for you; protect the manager with one strong password you won’t forget. Find out in advance how to get back into the manager itself: some can’t be recovered without their main password at all.
In Methmail, recovery will work like this. If you forget your password, your recovery phrase, a signed-in device or a passkey with account recovery turned on will get you back in at once, old emails included. If all you have left is a recovery email, you will get your address back after 7 days (after 72 hours if one of your devices has been signed in for more than a week), but old emails will stay locked: we won’t have the keys. If you lose your password and every recovery method, nobody will be able to open the old emails in your mailbox, including us.
Questions
Can I recover my email without a phone number? Usually, yes, if you set up something else. Google asks questions on its recovery page [2], Microsoft has its recovery form and recovery code [6, 7], Yahoo uses a recovery email [8], and Proton offers a recovery email, recovery phrase or emergency contacts [10].
How long does it take? Microsoft answers its recovery form within 24 hours [6]. New recovery info at Google may take up to 7 days to work [1].
Will I get my old emails back? It depends on how the provider stores your mail. Where stored emails are encrypted with keys the provider doesn’t have, a password reset by email or SMS alone can leave old emails locked: Proton describes a separate data recovery step [10, 11], and Methmail will work the same way if a recovery email is all you have left (below). The Google, Microsoft and Yahoo help pages above don’t describe a separate step.
What’s next
Sources
- Google: How to recover your Google Account or Gmail. https://support.google.com/accounts/answer/7682439?hl=en
- Google: Tips to complete account recovery steps. https://support.google.com/accounts/answer/7299973?hl=en
- Google: Set up recovery options for your account. https://support.google.com/accounts/answer/183723?hl=en
- Google: Sign in with backup codes. https://support.google.com/accounts/answer/1187538?hl=en
- Microsoft: Reset a forgotten Microsoft account password. https://support.microsoft.com/en-us/accounts-billing/manage/reset-a-forgotten-microsoft-account-password
- Microsoft: Help with the Microsoft account recovery form. https://support.microsoft.com/en-us/accounts-billing/manage/help-with-the-microsoft-account-recovery-form
- Microsoft: How to get a Microsoft account recovery code. https://support.microsoft.com/en-us/accounts-billing/manage/how-to-get-a-microsoft-account-recovery-code
- Yahoo: Reset or change your Yahoo password. https://help.yahoo.com/kb/SLN27051.html
- Yahoo: Fix problems signing into your Yahoo account. https://help.yahoo.com/kb/SLN2051.html
- Proton: Reset your Proton Account password. https://proton.me/support/reset-password
- Proton: Recover lost account data after a password reset. https://proton.me/support/recover-encrypted-messages-files
- Microsoft: How to recover a hacked or compromised Microsoft account. https://support.microsoft.com/en-us/accounts-billing/manage/how-to-recover-a-hacked-or-compromised-microsoft-account