Locked Out Right Now? Do These 6 Things Before You Do Anything Else
You just tried to log in. Wrong password. Reset link isn't arriving. Recovery phone number doesn't look right. You're locked out.
Most people immediately start guessing old passwords, clicking every link on the page, and getting increasingly frustrated. That makes things worse. Here's what to do instead.
1. Stop trying to log in.
Most platforms have attempt limits. After 5-10 failed tries, many services will temporarily lock your account, add a cooldown timer, or flag your IP. Every wrong guess makes the situation harder. Step away from the login screen.
2. Check your email — all of them.
The reset link might have gone to a recovery address you forgot about. Check your primary email, but also check spam/junk folders, old email accounts, and any address you might have used when you created the account. Search for the platform's name.
3. Check if you're still logged in somewhere else.
Your phone, a tablet, an old laptop, a work computer, a browser you don't usually use. If you're still logged in on any device, you can usually change your password from inside the account without needing the reset flow at all.
4. Look for backup codes.
If the account uses two-factor authentication, you were given backup codes when you set it up. Check your notes app, your downloads folder (search for "backup" or "recovery"), your photos (people screenshot these), or any password manager you use.
5. Use the platform's official account recovery — not the password reset.
Most major services (Google, Apple, Microsoft, Facebook, Instagram) have a separate account recovery process that's different from "forgot password." It usually involves verifying your identity through previously trusted devices, ID verification, or security questions. Search for "[platform name] account recovery" — not "password reset."
6. Document what happened.
Write down: which account, what error you saw, what recovery options were offered, what email/phone the reset was sent to. If you end up contacting support, having this ready will cut the back-and-forth in half.
What NOT to do:
Don't pay for third-party "account recovery" services. Most are scams.
Don't create a brand new account and abandon the old one — you'll lose purchase history, contacts, and data.
Don't call a random phone number from a Google search claiming to be support. Go directly to the platform's website and find their help page.
This is crisis management. It gets you through the immediate problem.
What it doesn't do is prevent the next one. If you want a system that makes sure you never end up here again — recovery emails verified, backup codes stored, every account mapped and maintained — that's what The Password Reset Readiness Framework is built for.
