Guides / Protect your email

Protect your email after your phone is stolen

Short answerFrom another device, sign the stolen phone out of your email and change your password. Then check that nobody has added forwarding, or changed your recovery phone or email. Do this soon after you've marked your phone as lost and called your network and bank.

Why email matters so much

Password resets and security alerts often go to your email. Google, for example, suggests changing the passwords of apps and sites that email you or that you sign in to with that address. So if someone gets into your email, they may be able to reach other accounts too.

On someone else's device, use a private window, and close it when you've finished.

Sign out and change your password

EmailWhat to do
GmailIn your Google Account, go to Security, then Your devices, then Manage devices. Pick the phone and choose Sign out. Then change your password. Full steps.
iCloud MailChange your Apple Account password from another Apple device if you can, or at account.apple.com. Apple suggests reviewing your account details there too. If that's blocked, here's what to try.
Outlook or HotmailSign in to your Microsoft account's Advanced security options, then choose Sign out under Sign out everywhere. Microsoft says this can take up to 24 hours, and that Xbox consoles are separate. Change your password as well.
YahooOn your account's security page, find the phone under Current sign-ins and choose Sign out. Yahoo also lists Recent account activity there. If anything looks wrong, change your password straight away.
Anything elseLook for the security page in your account settings, or ask your provider. If there's no option to sign out a device, at least change your password.

Menu names change now and then, so yours may look slightly different. If you can't see an option, your provider's help page will have the latest steps.

Check nothing was changed

This takes a few minutes, and it's easy to miss. Google's checklist is a good one to follow for any email account:

If you're asked for a code you can't get

This is common, because your codes went with your phone or your SIM. For Google, you can use another phone that's signed in to your account, another number you added or a saved backup code. A security key or a passkey also works, if you set one up earlier. If you can't get in, use the account recovery steps, and ask your network to move your number to a new SIM. Here's how that works in the Philippines. Elsewhere, pick your country.

What this can't do

Signing out cuts off your account, but it doesn't lock the phone or erase what's on it. We couldn't confirm what stays readable on the phone afterwards, and it may vary. So mark your iPhone as lost too, because Apple says that locks it with your passcode.

How FirstHour helps

With Plan B, you make a first-hour plan ahead of time and send it to someone you trust. Protect points out pictures of backup codes in Photos, because they can open an account without your phone. It can miss some. FirstHour can't change your email password or sign you out. It can't see inside your email at all.

Questions

Should I do this before calling my bank?

If you can, mark your phone as lost and call your network and bank first, because your bank can act on money and your network can stop text codes. Then do your email. If you can only do one thing right now, do what feels most urgent.

I've locked myself out. What now?

Use your provider's recovery page. With an Apple Account, Apple says recovery can take several days or longer, and Apple Support can't shorten it. Don't send a second request, because that can make the wait longer.

Will a thief still get my new emails?

Signing out and changing your password should cut off that access, but Microsoft says it can take up to 24 hours. So check again the next day.

Sources

All guides