Password recovery: regaining access to your account
Losing access to an account is a mild inconvenience when it is handled well and a real problem when it is handled under pressure. A forgotten password, a changed phone number or a locked session all have a right way to resolve them, and the wrong way usually involves following a link that promised to help. This article covers the recovery path and the mistakes that make a small lockout worse.
There is also a practical reason to keep recovery boring: it is the moment when you are most likely to accept help you should refuse. A lockout feels urgent, and urgency is exactly what a convincing fake offers to relieve. Knowing in advance that recovery runs only through the official page turns that moment from a decision into a procedure, and a procedure is much harder to derail.

Why recovery should be boring
The point of a recovery process is that it is dull, predictable and slow enough to be safe. It exists for the person who genuinely lost access, and its deliberate friction is a feature. A recovery that is instant and effortless for you would be just as effortless for someone pretending to be you, which is why the process asks for proof rather than convenience.
Understanding this changes how you react. A process that will not rush is not being unhelpful; it is doing the one job it has, which is to make sure the person resetting the password is the account holder.
Starting from the official page only
The recovery journey begins in the same place as a normal login: the operator's own page or the official app. Use the “forgot password” option there, and nowhere else. A recovery page reached from a search result, a message or an advertisement may look identical while leading somewhere entirely different, and the whole point of the attack is that you are already distressed and moving quickly.
If you arrive at a recovery page with an uncertain address, stop. Returning to the address you trust takes seconds, while a reset entered on a fake page hands over the very thing the lockout was protecting.
The usual recovery steps
Once you are on the official page, the steps are typically few: identify the account, receive a code or a link, and set a new password. You may need access to the email address or phone number registered earlier, which is why keeping that contact information current matters more than it seems. If the details are out of date, recovery can stall.
When you set a new password, treat it as a fresh start rather than a chance to reuse the old one. The reason you are here may have been a forgotten password, but it is also an opportunity to replace something weak with something that holds up.
If the reset message does not arrive
- Check the spam or junk folder before assuming it failed.
- Confirm you started the reset from the official page.
- Verify the contact address or number is the one on the account.
- Wait a short while before requesting again, to avoid duplicate attempts.
- Contact official support through the operator's own channels if it persists.
What not to do under pressure
The worst decisions happen in the minutes right after a lockout, when help is most welcome and least trustworthy. A message offering to recover your account for you, a site that will “unlock” it quickly, or an app that claims to restore access are all variations on the same trick. They work because the moment of being locked out is exactly when a shortcut looks most attractive.
The rule is simple: recovery is something you do through the official page, not something anyone does for you. Anyone offering to do it on your behalf is asking for the access you are trying to protect.
Preventing the next lockout
Most lockouts are avoidable with two habits. Use a password manager so that you are not relying on memory, and keep your contact details current so that recovery has somewhere to reach you. Together, these two measures turn a disruptive event into a short detour.
It also helps to record, in a place only you control, which email address and number are attached to the account. Recovery depends on that link, and knowing it in advance removes the guesswork from an already frustrating moment.
Recovery reference
| Situation | Right approach | What to avoid |
|---|---|---|
| Forgotten password | Reset from the official page | Following message links |
| No reset message | Check spam and the details | Replying to unknown senders |
| Old contact details | Contact official support | Third-party “helpers” |
| Locked session | Wait, then retry calmly | Repeated rapid attempts |
| Prevention | Manager plus current details | Reused, memorised passwords |
Recovery is safest when it is slow, official and boring. Start on the operator's page, follow the normal steps, and treat every offer of help from elsewhere as a reason to stop rather than to proceed. The minutes after a lockout are precisely when a shortcut is most dangerous. Because the recovery steps, contact requirements and support channels are set by the operator and may change, confirm the current process on the official page before you rely on it, and remember that these products are for adults only (18+).
Read next
Registration: what to prepare and how to complete it
The data you need, the age check and how to confirm a new account.
Login: signing in securely on app and browser
What a normal sign-in looks like and the habits that keep it safe.
Two-factor protection for your account
How a second step at login reduces the risk of losing access.