What to do if you can't get into your email
If you've lost access to your email account, the first step depends on whether you remember your password. Most email providers—Gmail, Outlook, Yahoo, and others—have a recovery process built in that doesn't require you to contact anyone. You can usually regain access within minutes by answering security questions, using a backup email address, or confirming your identity through a phone number you registered.
The process is different if someone else has taken control of your account, if you've forgotten both your password and recovery information, or if your account was deleted. Each situation has a specific path forward, and knowing which one applies to you saves time.
Key Takeaways
- Most email providers let you reset your password through a recovery email or phone number without contacting support.
- If you don't have access to your recovery email or phone, you'll need to answer security questions or provide government ID to prove your identity.
- If someone else has control of your account, change your password when ready and review connected accounts and devices for unauthorized access.
- Deleted accounts can sometimes be recovered within a limited window—usually 30 days—but the process varies by provider.
- If your account was hacked and used to send spam or phishing emails, report it to your provider and notify your contacts.
Resetting your password when you remember your recovery information
Go to the login page of your email provider and look for a link that says "Can't access your account," "Forgot password," or "Need help signing in." Click it. The provider will ask you to enter your email address, then offer you options to verify your identity.
The fastest option is usually a code sent to your backup email address or phone number. Enter the code, and you'll be taken to a screen where you can create a new password. Once you set it, you can log in when ready. This process takes about five minutes and doesn't require you to contact anyone.
If you have a backup email address registered but can't access it anymore, select the phone number option instead. The provider will text or call you with a verification code. If you don't have either, you'll move to the next step.
Proving your identity when you don't have recovery information
If you can't access your backup email or phone number, the email provider will ask you to answer security questions you set up when you created the account. These questions might ask about your first pet, your mother's maiden name, or the city where you were born. Answer as many as you can correctly, and the provider will let you reset your password.
If you don't remember the answers or didn't set up security questions, most providers will ask for a government ID—a driver's license, passport, or state ID. You'll upload a photo of it through their website. A human reviewer will check it against the account information on file. This step usually takes 24 to 48 hours.
Some providers also let you confirm your identity by listing devices you've used to access the account, payment methods on file, or recovery codes you saved when you first set up two-factor authentication. If you have any of these, use them—they're faster than waiting for ID review.
What to do if your account was hacked
If you regain access and suspect someone else used your account, change your password to something long and unique—at least 16 characters, mixing letters, numbers, and symbols. Don't reuse a password you've used anywhere else.
Next, check what's connected to your email. Look at your account recovery options and remove any phone numbers or backup email addresses you don't recognize. Review your connected apps and devices—Gmail calls this "Manage your Google Account" and then "Security"; Outlook calls it "Device and app management." Remove anything unfamiliar.
If your email was used to send spam or phishing messages, notify your contacts directly through another channel—a text, a call, or a message on social media. Tell them not to click links or read files from emails claiming to be from you. Also report the compromised account to your email provider through their abuse or security reporting form.
Turn on two-factor authentication if you haven't already. This requires a code from your phone or an authentication app every time you log in from a new device, making it much harder for someone else to break in again.
Recovering a deleted email account
If your account was deleted, you may be able to recover it within a limited time. Gmail gives you 20 days; Outlook gives you 60 days; Yahoo gives you 90 days. After that window closes, the account and all its data are permanently gone.
Go to your provider's account recovery page and follow the same steps as a forgotten password—use your backup email, phone number, or security questions to prove your identity. If the account is still in the recovery window, you'll see an option to restore it. Click it, and your account will be reactivated with your emails and contacts intact.
If the recovery window has closed, you cannot get the account back. You can create a new account with the same email address, but it will be empty. Any emails that were in the old account are gone.
When you need to contact your email provider directly
Most email providers don't have phone support for account recovery—they handle it through their website. However, if you've tried the recovery steps and they're not working, you can submit a support request through your provider's help center.
Gmail's support form is in the Google Account Help Center under "I can't sign in." Outlook's is in the Microsoft Account support page. Yahoo's is in the Yahoo Account Help Center. Fill out the form with as much detail as you can: when you last accessed the account, what device you used, and what recovery information you have on file.
Response times vary. Some providers respond within 24 hours; others take a week or more. If your account contains important business or financial information, mention that in your request—it may prioritize your case.
Preventing future lockouts
Once you're back in, take steps to avoid this situation again. Add a backup email address and phone number to your account. Write down your security questions and answers and store them somewhere safe—a password manager, a locked drawer, or a safe deposit box.
If your email provider offers recovery codes—usually a list of 8 to 10 single-use codes you can use if you lose access to everything else—save them. Print them out or store them in a password manager. Don't just leave them in your email inbox, because if you can't access your email, you can't access them.
Use a unique password for your email account. If that password is compromised in a data breach somewhere else, your email is still protected. A password manager like Bitwarden, 1Password, or KeePass can generate and store a strong password for you.
Frequently Asked Questions
How long does it take to recover a hacked email account?
If you can verify your identity through a backup email or phone number, you can reset your password and regain access in minutes. If you need to submit a government ID for verification, it usually takes 24 to 48 hours. If your provider's support team needs to investigate, it can take a week or longer.
Can I recover my email if I don't have the phone number or backup email anymore?
Yes. You can answer security questions, provide a government ID, or list devices and payment methods you've used with the account. The ID verification route usually takes 24 to 48 hours. Security questions are faster if you remember the answers.
What happens to my emails if my account is deleted?
If you recover the account within the provider's recovery window (20 to 90 days depending on the provider), your emails are restored. If the window closes, they're permanently deleted and cannot be recovered.
Do I need to contact my email provider if I forgot my password?
No. Use the "Forgot password" link on the login page and verify your identity through your backup email, phone number, or security questions. You only need to contact support if the self-service recovery steps don't work.
What should I do if I think my email was used to send phishing emails?
Change your password when ready, remove unrecognized recovery information and connected devices, and turn on two-factor authentication. Then contact your email provider's abuse team to report the compromise. Notify your contacts through another channel and warn them not to click links in emails claiming to be from you.