Phone lost, account locked: what really helps now

[Redaktion]

Your phone is gone. You still know the password, but the second factor lived on that exact device. We read the recovery procedures at Google, Apple and Microsoft, and the ones at 1Password, Bitwarden and Dashlane. All six come down to the same thing. Nothing can be set up after the fact, and at one provider the account is gone for good.

https://www.notebookcheck.net/Phone-lost-account-locked-what-really-helps-now.1360570.0.html

[indy0]

I have backup codes from Google, and I've used them once.

For whatever reason, the logon verification (usually three images and you pick one) that Google sends my phone doesn't work anymore.  I just never receive it.  I use authenticator, instead. That...is concerning. 

Google having friends/contacts be a recovery source leaves me feeling uncomfortable.  I could see a "mass worm" that tricks people into recovering their friends/families accounts on behalf of the worm.

Bitwarden does it right.  It's a password manager, it should be and is locked down tight.

It's also really important to CHANGE your important passwords regularly.  Breaches happen, and technology improves (like quantum, etc) where your password might not be breachable NOW, but it could in the future.  Changing regularly is a few steps ahead of the curve for preventing this type of breach impacting you.