Skip to main content

Passkey Recovery Strategy

What to Do When a Device Is Lost or Stolen

If you lose a device with passkeys on it, switch to your Backup device to keep signing in, revoke the lost device's access on each affected account, then register a replacement to restore your redundancy.

Overview

This article covers what to do after losing a device. See Passkey Backup Strategy for how to prepare before it happens - the steps below assume you already have at least one Backup device registered.

Immediate Steps If You Lose a Device

Switch to Your Backup Device

If you registered a Backup device in advance, you can keep signing in to every affected account with it right away - no urgency there.

Revoke the Lost Device's Access

For each account where the lost device had a passkey registered, sign in using your login and password, then find the passkey settings. Identify the passkey tied to the lost device and delete it - once removed, it can no longer be used to sign in, even by whoever has the physical device now.

Register a Replacement Device

Once the lost device is revoked everywhere, register a new device to restore your original Main + Backup setup. See Passkey Backup Strategy for the recommended setup.

Update Your Own Records

If you keep track of which device is registered where, update that list to reflect the change.

If You Never Set Up a Backup Device

Without a Backup device already registered, you'll need to fall back on each service's own account recovery process - which is exactly why keeping a password as a fallback matters. See Keep a Password Fallback Where Possible.

Forgot Your PIN Instead of Losing the Device?

That's a different situation - your device isn't lost, you just can't unlock its passkey/OTP features. See Resetting Your Seedkeeper for that case.

FAQ

Can someone use my lost device's passkey before I revoke it?

A passkey still requires your device's own security (like your passkey PIN) to be used - but revoking it as soon as possible removes any risk entirely. See Revoke the Lost Device's Access above.

Do I need to do anything on my Seedkeeper PRO itself when a device is lost?

No - since passkeys aren't synced between devices, there's nothing to update on your other devices. Revocation happens on each service's side, not on your Seedkeeper PRO.

What if I don't have a Backup device registered anywhere?

You'll need to use each service's own account recovery process. See If You Never Set Up a Backup Device above.