Skip to main content

Passkey Recovery Strategy

What to Do When a Device Is Lost or Stolen

If you lose a device with passkeys on it, switch to your Backup device to keep signing in, revoke the lost device's access on each affected account, then register a replacement to restore your redundancy.

Overview​

This article covers what to do after losing a device. See Passkey Backup Strategy for how to prepare before it happens - the steps below assume you already have at least one Backup device registered.

Immediate Steps If You Lose a Device​

Switch to Your Backup Device​

If you registered a Backup device in advance, you can keep signing in to every affected account with it right away - no urgency there.

Revoke the Lost Device's Access​

For each account where the lost device had a passkey registered, sign in using your login and password, then find the passkey settings. Identify the passkey tied to the lost device and delete it - once removed, it can no longer be used to sign in, even by whoever has the physical device now.

Register a Replacement Device​

Once the lost device is revoked everywhere, register a new device to restore your original Main + Backup setup. See Passkey Backup Strategy for the recommended setup.

Update Your Own Records​

If you keep track of which device is registered where, update that list to reflect the change.

If You Never Set Up a Backup Device​

Without a Backup device already registered, you'll need to fall back on each service's own account recovery process - which is exactly why keeping a password as a fallback matters. See Keep a Password Fallback Where Possible.

Forgot Your PIN Instead of Losing the Device?​

That's a different situation - your device isn't lost, you just can't unlock its passkey/OTP features. See Resetting Your Seedkeeper for that case.

FAQ​

Can someone use my lost device's passkey before I revoke it?

A passkey still requires your device's own security (like your passkey PIN) to be used - but revoking it as soon as possible removes any risk entirely. See Revoke the Lost Device's Access above.

Do I need to do anything on my Seedkeeper PRO itself when a device is lost?

No - since passkeys aren't synced between devices, there's nothing to update on your other devices. Revocation happens on each service's side, not on your Seedkeeper PRO.

What if I don't have a Backup device registered anywhere?

You'll need to use each service's own account recovery process. See If You Never Set Up a Backup Device above.