Apple recovery contact or key: what happens if you lose your phone?

What enabling a recovery key actually changes

An Apple recovery contact adds someone who can help you recover access. A recovery key changes the recovery process: enabling the 28-character code turns off Apple’s standard account recovery. Choose a contact if you want a trusted person available to help; choose a key only with a way to keep that code accessible when your Apple Account is not.

A 2024 AppleHelp question asked whether enabling a key disables an existing recovery contact. Apple offers a contact or key for encrypted iCloud data access on a new device. For an account with recovery key enabled, however, its lockout instructions require the key and a trusted-number verification code. Keeping a contact available for data recovery does not remove that requirement.

Choice	What you arrange in advance	What happens during recovery
Recovery contact	Designate someone you know and trust	They provide help from their Apple device without receiving account access
Recovery key	Generate and safely store a 28-character code	When no trusted device is available or you are locked out, use the key and a verification code sent to your trusted number
Standard account recovery	Available when recovery key is not enabled	If password reset is unsuccessful, a recovery request can involve a wait of several days or longer

Apple’s recovery key guide makes the change explicit. Removing the key later restores standard account recovery. That is a setting to manage while you can access your account, rather than a fallback you can assume will be available after losing access.

If a signed-in device still works, start there

A new iPad asking for a forgotten password does not necessarily mean you need account recovery. If your iPhone is already signed in to the same Apple Account with two-factor authentication, it is a trusted device. Apple recommends trying a password change on that device first.

On the iPhone, open Settings, select your name, then Sign-In & Security and Change Password. Follow the onscreen steps. On a Mac, use System Settings → your name → Sign-In & Security → Change Password, and enter the password used to unlock the Mac. These are the documented password-change paths. Afterward, use the new account password on the device you are setting up.

Apple notes that Stolen Device Protection can require a one-hour security delay for a password change. Follow that device’s instructions if the delay appears. It is a different procedure from the multi-day account recovery wait discussed below.

If the old phone has already been traded in, your remaining recovery factors determine the next steps. Apple’s sign-in recovery guide lists trusted phone numbers and recovery contacts among those factors, and directs accounts using optional keys to their specific recovery procedures. Having a new phone with the same number can preserve access to verification messages even though the new phone is not yet a signed-in trusted device.

Add a person who can actually help you

On iPhone, go to Settings → your name → Sign-In & Security → Recovery Contacts → Add Recovery Contact. Choose a suggested person or someone else. A Family Sharing member is added automatically; someone outside that group must accept the invitation in Messages. Wait for confirmation that the person has been added.

Apple allows up to five recovery contacts. An additional trusted person can give you someone else to reach if your first contact is unavailable. Adding a contact does not share your account password, photos, or messages with them. They receive the ability to help with recovery.

Prepare compatible devices on both sides. Your Apple devices must run iOS 15, iPadOS 15, or macOS Monterey 12 or later, and the contact needs an Apple device meeting those versions. Both people need iMessage enabled and must meet the applicable age requirement; Apple says over 13, with regional differences. Enable two-factor authentication if prompted.

The setup may identify unused devices with older software. Review the named device before removing anything from the account. If the chosen person declines or later removes themselves as a contact, Apple sends a notification so you can select someone else.

How the contact supplies help

When you cannot reset your password, begin account recovery and verify the requested account information. Then contact your registered person by phone or in person. The code goes into the recovery process on your device; your contact does not sign in as you to change your password.

On their iPhone, the helper opens Settings → their name → Sign-In & Security → Recovery Contacts. Under Account Recovery For, they select your name and choose Get Recovery Code. They give you the six-digit code directly. Apple’s helper instructions say not to provide it to someone else claiming to request it on your behalf.

If both people use the latest iOS and are nearby, the helper may receive a request to help on their phone. They select the named person and hold their iPhone over the animation on the other phone. A Can’t Scan option provides a code-based fallback. The six-digit recovery-code procedure remains useful when you are talking to a contact elsewhere.

A recovery contact’s code and a verification code sent to a trusted phone number come from different places. Enter the factor requested by the recovery screen. This becomes especially relevant if your account has a recovery key enabled and the process requires a trusted-number verification code alongside that key.

Create a key that survives losing the phone

On a signed-in iPhone or iPad, open Settings → your name → Sign-In & Security → Recovery Key, then Continue. Generate the key, write it down, and confirm it to finish setup. On a Mac, the equivalent setting is under System Settings and offers Turn On. Apple supports this feature from iOS 14, iPadOS 14, and macOS Big Sur, and recommends current software.

Store the key somewhere you can reach without signing in to the account. Apple advises a printed or written copy, potentially in more than one safe location or with a trusted family member. It specifically advises against storing the key in Apple Passwords, iCloud Photos, Notes, or iCloud Drive, because losing account access can make those copies inaccessible too.

For example, a screenshot kept only in iCloud Photos creates a circular dependency after the only phone is lost: the new device needs account access before you can retrieve the code intended to restore that access. A separately stored paper copy avoids relying on that same account. Keeping it away from the phone also avoids losing both together.

When no trusted device is available or you are locked out, Apple requires the recovery key and a verification code sent to your trusted phone number. Apple cannot supply a lost key. If you lose account access and cannot provide the required key, the lockout can be permanent.

While account settings remain accessible, use Replace Recovery Key to generate a new one and complete its storage and confirmation steps. If you decide to stop using this feature, choose Remove Recovery Key.

Advanced Data Protection and encrypted data prompts

Advanced Data Protection applies end-to-end encryption to most iCloud data, including backups, photos, and notes. Apple does not hold the encryption keys needed to recover that protected data for you. Setup therefore requires at least one alternative recovery method: a recovery contact or a recovery key.

A new device or a web session may not automatically have access to encrypted iCloud data. A notification that some data is not syncing can lead to a choice of recovery contact or recovery key. If you select the contact, the helper can provide a code for access to that data using the same Recovery Contacts settings described above.

Account access has its own requirements. If you enabled a recovery key and are now locked out without a trusted device, the key-and-trusted-number requirement still applies. The encrypted-data prompt does not turn standard account recovery back on. For someone setting up Advanced Data Protection, choosing a contact fulfills the alternative-method requirement without enabling the separate recovery-key setting.

When standard account recovery is available

If recovery key is not enabled and available factors cannot reset the password, standard account recovery may be the next route. On a borrowed Apple device, open the Support app, find Support Tools, select Reset Password, then Help Someone Else. Apple says information entered through that process is not stored on the borrowed device.

The recovery waiting guide gives 72 hours for the confirmation email to arrive, not for recovery to finish. Accounts that use only a phone number receive the confirmation by iMessage. The wait can last several days or longer. Apple Support cannot shorten it, and another request without additional recovery factors can extend rather than accelerate it.

Device use depends on where recovery started. On iOS 17, iPadOS 17, or macOS 27 or later, you can keep using the device that started the process. If you started on the web, turn off all Apple devices during the wait. Other signed-in device activity can cancel the request. If a found trusted device lets you successfully change the password, that cancellation is expected: use the new password.

Check the expected time at iforgot.apple.com using the same account and phone information as the original request. After a full 72 hours without the confirmation, check spam folders and the request’s status. An active request can show its expected time online; an inactive one may have been canceled or never successfully submitted.