015 - Write Down Important Recovery Information
“If your phone breaks or you forget a password, recovery codes can save you. Store critical account recovery information somewhere safe offline — not just on the device itself.”
Don't Lock Yourself Out
Imagine coming home after a long, exhausting trip, reaching into your pocket, and realizing your house keys are gone. It’s a miserable feeling. Now imagine that instead of a locksmith drilling your door open, there is absolutely no one to call.
In the digital world, that is exactly what happens when you get locked out of your main online accounts.
When you set up extra security—like two-factor authentication on your email, bank, or password manager—the system usually hands you a list of "recovery codes" or an "account recovery key." Most of us skim right past this screen, click "Got it," and promptly forget they ever existed.
Why the Cloud Won't Save You
We’ve been conditioned to think everything can be reset with a quick email link. But if the account you are locked out of is your email, or if a hacker changes your phone number, those standard reset buttons stop working.
Those random blocks of letters and numbers you were shown at setup are your ultimate, unbreakable spare keys. If you lose them and your phone breaks or gets stolen, even the tech companies themselves can't let you back in.
Your 10-Minute Locksmith Plan
You don't need a computer science degree to build a foolproof backup system. You just need to take your digital security completely offline.
Here is what you can do today:
Find the Codes: Log into your most critical accounts (your primary email, your password manager, and your cloud storage). Go to the Security settings and look for "Recovery Codes" or "Backup Keys."
Write Them Down: Grab a physical piece of paper and a pen. Write down the name of the website, your username, and the exact recovery codes. Do not type them into a note-taking app on your phone—if you lose the phone, you lose the note!
Hide the Spare: Treat this paper like cash or a birth certificate. Place it in a fireproof safe, a locked filing cabinet, or a secure drawer at home.
It takes less than ten minutes, but having a physical backup copy guarantees that no matter what happens to your gadgets, you’ll never be permanently locked out of your digital life.
What Now
If you have realized that your critical online accounts lack a secure safety net, or if you want to ensure you never face a permanent lockout, leading digital safety organizations like the National Cybersecurity Alliance recommend creating a robust backup recovery plan. Take these immediate actions to secure your emergency access keys:
Locate Your Core Accounts' Recovery Keys: Set aside time to log into your most vital digital platforms—specifically your primary email, password manager, and cloud storage accounts. Navigate to the Security or Two-Factor Authentication (2FA) menus and locate options labeled "Backup Codes," "Recovery Tokens," or "Account Recovery Keys."
Implement a Dual Storage Strategy: Do not rely on a single backup method. Experts suggest storing your emergency keys in two distinct formats: a physical copy and a secure digital copy, ensuring that a single incident like a house fire or a broken phone cannot destroy your access entirely.
Secure Your Physical Backups: If you choose to print or write down your recovery codes by hand, treat that paper with the same level of security as cash, a passport, or a birth certificate. Store it immediately in a locked filing cabinet, a home safe, or a secure safety deposit box.
Encrypt Your Digital Backups: If you prefer to keep a digital copy of your recovery codes, never leave them sitting in a plain text file, a screenshot, or a standard note-taking app on your desktop. Instead, save them as encrypted notes directly inside your password manager vault, or place them within an encrypted folder.
Establish an Annual Access Audit: Make it a habit to check your recovery methods at least once a year, or whenever you purchase a new smartphone. Log in to verify that your recorded backup codes are still valid, update any outdated recovery phone numbers, and ensure your secondary contact emails are still active.
Local Resources
Cyber-Seniors https://cyberseniors.org/free-tech-help/
(844) 217-3057
The Arc of Southwest Washington https://thearc.org/our-initiatives/digital-literacy/
(360) 254-1562
TechConnect WA (Equity in Education Coalition) https://eec-wa.org/digital-equity/
(206) 538-6603