Losing a phone used to mean a bad afternoon. Losing a phone in 2026 can mean losing a bank account, a company email, and every social login stitched to it. Google’s July announcement, letting people back into their account with a live selfie instead of a password, is a nod at how brittle recovery has become. Until that rolls out for everyone, the safety net has to be an app you install today.
We tested eight apps for account recovery on Android, weighted toward the two moments that matter: proving you are you on a new device, and helping someone else in your household do the same if you are the one who is gone.
What to look for in an account recovery app
The good ones do at least four of the following:
- Store passkeys or seed phrases somewhere the phone itself does not hold
- Offer a designated trusted contact who can unlock the vault
- Print a paper recovery kit you can put in a safe
- Sync to a second device you control
- Work fully offline, so airport Wi-Fi is not part of the plan
- Support hardware keys as a fallback when biometrics fail
Skip apps that only offer SMS recovery. SIM-swap fraud makes SMS the weakest link in the chain, and most 2FA guidance now flags it as a last resort.
Quick comparison
| App | Best for | Platforms | Free plan | Starting price | Rating |
|---|---|---|---|---|---|
| Bitwarden Password Manager | Emergency Access to trusted contact | Android, iOS, Web, Desktop | Yes, unlimited passwords | $10/year | 4.6 |
| 1Password | Emergency Kit PDF backup | Android, iOS, Web, Desktop | 14-day trial | $2.99/month | 4.4 |
| Device-based recovery for a Google account | Built into Android | Yes | Free | 4.2 | |
| Microsoft Authenticator | Microsoft account recovery + backup | Android, iOS | Yes | Free | 4.6 |
| Proton Pass | Recovery kit + hardware key | Android, iOS, Web, Desktop | Yes, limited vaults | $1.99/month | 4.5 |
| KeePassDX | Offline vault with physical backup | Android | Yes, open source | Free | 4.6 |
| Yubico Authenticator | TOTP codes stored on a hardware key | Android, iOS, Desktop | Yes | Free (hardware $25+) | 4.4 |
| Signal | PIN-based re-registration | Android, iOS, Desktop | Yes, open source | Free | 4.6 |
The apps
1. Bitwarden Password Manager – Best for a trusted contact who can rescue you
Bitwarden is the only free vault with real Emergency Access. You nominate a trusted contact, set a waiting period from one to ninety days, and if you cannot respond within it, they inherit read or takeover access to your vault. The recovery flow is server-mediated but end-to-end encrypted, so Bitwarden itself never sees your master password.
Where it falls short: Emergency Access requires the trusted contact to also have a Bitwarden account. And the free tier still lacks integrated TOTP, so 2FA lives in a separate app.
Pricing:
- Free: unlimited passwords across unlimited devices
- Paid: Premium at $10/year unlocks the integrated authenticator and file attachments
Platforms: Android, iOS, Web, Windows, macOS, Linux
Download: Aptoide · Google Play
Bottom line: the default pick if you want a real “if I disappear, my partner still gets in” plan.
2. 1Password – Best for a paper recovery kit
1Password for account recovery leans on its printed Emergency Kit, a one-page PDF with the account email, the Secret Key, and space to write your master password. You print it, sign it, and lock it in a safe. On any new device, the Emergency Kit plus the master password reconstructs the vault entirely from scratch. It is the only mainstream password manager where the recovery method is a piece of paper.
Where it falls short: no free tier at all, and the Secret Key must survive an event that also takes out your laptop and phone. A fireproof pouch is not optional.
Pricing:
- Free: 14-day trial
- Paid: Individual at $2.99/month, Families at $4.99/month for five people
Platforms: Android, iOS, Web, Windows, macOS, Linux, Chromebook
Download: Aptoide · Google Play
Bottom line: the pick if you trust a physical safe more than a trusted contact.
3. Google – Best for a Google account when you still have any Android device
The Google app on Android hosts the account recovery flow itself, and it is the strongest option if the account you are recovering is a Google one. Any signed-in Android device becomes a trust anchor. Approve the “Is this you trying to sign in?” prompt on an old phone in a drawer, and you are back in without a password. The July selfie access work sits on top of this pipeline; the drawer phone is what carries you until then.
Where it falls short: it only recovers Google accounts. Everything else on the phone still needs another plan.
Pricing:
- Free
- Paid: none for the recovery flow. Google One storage is unrelated.
Platforms: built into Android and iOS
Download: Aptoide · Google Play
Bottom line: keep an old logged-in Android in a drawer. It is the fastest recovery you own.
4. Microsoft Authenticator – Best for a Microsoft account plus generic TOTP recovery
Microsoft Authenticator is more than a codes app. It backs up your TOTP seeds to your Microsoft account, restores them on a new phone with one tap, and adds passwordless sign-in to Microsoft accounts through push approval. If you use Outlook, GitHub, or an Azure tenant, this is the app that keeps you connected when the phone is gone.
Where it falls short: backup only works for a Microsoft account. Personal Google accounts export codes through Google’s own flow instead.
Pricing:
- Free
- Paid: none
Platforms: Android, iOS
Download: Aptoide · Google Play
Bottom line: free, official, and the least-friction way to move 2FA between phones.
5. Proton Pass – Best for a recovery kit plus hardware key
Proton Pass is the newest password manager on this list and the most opinionated about recovery. You can pair a YubiKey or other FIDO2 key as your primary sign-in, then print a recovery phrase on paper as the fallback. The bundle with Proton Mail and Proton VPN turns the whole account into a portable identity kit.
Where it falls short: the free tier caps vaults at three, which is fine for personal use but tight if you separate work and home.
Pricing:
- Free: three vaults, unlimited passwords, one email alias
- Paid: Pass Plus at $1.99/month annually, Proton Unlimited at $9.99/month for the whole bundle
Platforms: Android, iOS, Web, Windows, macOS, Linux, browser extensions
Download: Aptoide · Google Play
Bottom line: the pick if you already trust Proton with mail and VPN and want one recovery flow for all three.
6. KeePassDX – Best for a fully offline vault with a physical backup
KeePassDX is a KeePass-compatible Android client with no cloud story at all. The vault is a single encrypted .kdbx file. You back it up to a USB stick, a NAS, or a Syncthing pair to another device, and recovery is “put the file back and remember the master password.” It is the option for people who trust their own copy of a file more than any provider.
Where it falls short: you own the entire recovery process. Forget the master password with no keyfile and no fallback, and the vault is gone.
Pricing:
- Free: entire app under GPLv3
- Paid: a Pro version at a small one-time fee unlocks convenience features but is not required
Platforms: Android (desktop through KeePassXC, iOS through KeePassium)
Download: Aptoide · Google Play · F-Droid
Bottom line: the technically strongest recovery model if you can trust yourself with a filing cabinet.
7. Yubico Authenticator – Best for TOTP codes stored on a hardware key
Yubico Authenticator stores TOTP secrets on a YubiKey instead of on the phone. Lose the phone, keep the YubiKey, and every code you had is recoverable from any device that reads NFC or USB-C. A single YubiKey holds around 32 accounts on the OATH applet, and a second key in a safe deposit box is the classic backup.
Where it falls short: you need to buy a key, and the 32-account limit means power users end up managing two keys.
Pricing:
- Free: the app itself
- Paid: YubiKey 5C NFC starts at $55, the budget Security Key NFC at $25
Platforms: Android, iOS, Windows, macOS, Linux
Download: Aptoide · Google Play
Bottom line: the pick if you like the idea of your recovery kit fitting on a keychain.
8. Signal – Best for keeping a messenger account across a lost phone
Signal does not compete with password managers, but it belongs on this list because losing your phone usually means losing your primary comms. A Signal PIN, set to at least six digits, lets you re-register on a new device without losing your account. Message history does not carry through unless you back up locally, but contacts, groups, and identity keys do.
Where it falls short: message history stays on the device and is not synced across devices, so the recovered account starts fresh.
Pricing:
- Free: entire app under GPLv3
- Paid: none
Platforms: Android, iOS, Windows, macOS, Linux
Download: Aptoide · Google Play · F-Droid
Bottom line: set the PIN today and you will not lose the account when the phone goes.
How to pick the right one
If you want a family safety net: Bitwarden with Emergency Access to a partner or a sibling.
If you want a paper trail you can hand to a lawyer: 1Password Emergency Kit in a fireproof pouch.
If your whole life is on a Google account: Google, with a second logged-in Android in a drawer.
If you already pay Microsoft: Microsoft Authenticator for both codes and passwordless sign-in.
If Proton already runs your mail and VPN: Proton Pass so the recovery kit covers everything.
If you distrust the cloud entirely: KeePassDX with the vault file on a USB stick.
If you want the strongest 2FA recovery a keychain can hold: Yubico Authenticator with two YubiKeys.
If you use Signal at all: Signal with a six-digit PIN set right now.
FAQ
What happens when Google’s selfie account access launches?
It becomes an additional recovery method on the Google account, not a replacement. You still need a password manager for every non-Google service, and Google’s own docs recommend keeping a passkey or a backup device paired.
Is SMS recovery good enough?
No. SIM-swap fraud, where an attacker convinces a carrier to move your number to their SIM, defeats SMS recovery in under an hour. Every guide from NIST to the FTC now flags SMS as the last option, not the first.
Do passkeys replace account recovery?
Only partially. Passkeys sync through iCloud, Google Password Manager, or a third-party vault like Bitwarden, so you get recovery for free on those platforms. Non-sync passkeys tied to a single device still need a fallback.
What is Emergency Access in Bitwarden and 1Password?
It is a designated trusted contact with a waiting-period claim on the vault. In Bitwarden, the trusted contact requests access, you have 1 to 90 days to deny it, and if you cannot, access is granted. 1Password uses the same idea through its Emergency Kit and shared family vaults.
How many recovery methods should I have?
At least two independent ones. A password manager plus a hardware key is a common pair. A password manager plus a second logged-in device is another. Anything that depends on a single object, even a phone, is one lost bag away from a bad month.
Are hardware keys worth the money?
Yes if you use them for both account recovery and daily 2FA. A single YubiKey 5C NFC covers Google, Microsoft, GitHub, and every major password manager, and it does not care if your phone is dead.
