Being locked out of your email is stressful because so many other accounts depend on it. Most lockouts can be fixed through the provider's official recovery process, and the steps below cover Gmail, Outlook, Yahoo, and iCloud. They also cover how to make another lockout less likely.
First, confirm what kind of lockout it is
- Forgotten password: You can't sign in, but the account isn't restricted.
- Temporary lock: The provider saw too many failed attempts or unusual activity and paused sign-in.
- Suspended or disabled account: The provider blocked the account over suspected abuse, spam, or a terms violation.
- Hacked account: Someone else changed the password or recovery details.
- Work or school account: An administrator controls it, and you can't recover it yourself.
Why email accounts get locked
- Several wrong password attempts, including old passwords saved in an app.
- Sign-ins from a new device, country, or VPN that look suspicious.
- Sudden bulk sending, which resembles spam.
- Signs the account was compromised, such as password reset requests you didn't make.
- Long inactivity. Providers may limit or close accounts that go unused for a long time, so check your provider's current policy.
Before you start: beware fake lockout emails
Scammers send fake "your account is locked" messages with links to copycat sites. Don't click links in those emails. Go to the provider's official recovery page by typing the address yourself, or use the official app.
Recover your account step by step
- Wait if the lock is temporary. If the message says to try again later, wait before more attempts. Repeated tries can extend the delay.
- Use a device and location you normally use. Recovery works much better from your usual phone or computer, on your home Wi-Fi, in your usual browser.
- Start the provider's recovery process. Use the official page for your provider (see below).
- Verify with your recovery email or phone. Enter the code that's sent and follow the prompts to set a new password.
- If you don't have those options, use the provider's alternative recovery form and answer as accurately as you can.
- After you get in, change your password and review security settings (see the checklist below).
Provider-specific recovery
Gmail (Google Account)
Go to g.co/recover or choose Forgot password? on the sign-in screen. Google may ask for a previous password, a verification code, or confirmation on a device that's already signed in. Answer as many questions as you can, and use a device you've signed in from before.
Outlook, Hotmail, and Microsoft accounts
Choose Forgot password on the Microsoft sign-in page and follow the prompts. If you can't get codes sent, Microsoft has an account recovery form at account.live.com/acsr. It asks for details such as previous passwords and recent email subjects, so fill it in with as much accurate information as you have.
Yahoo Mail
Use Forgot username or Forgot password on the Yahoo sign-in page, or go to login.yahoo.com/account/recover. Yahoo sends a verification code to your recovery phone or email.
iCloud Mail (Apple Account)
Go to iforgot.apple.com. Apple may ask for a trusted phone number or device. If recovery is needed because you lost access to trusted methods, Apple can place a waiting period on the request. That is a security feature, so follow its instructions and don't start repeated requests.
Work or school email
Contact your IT administrator. Provider recovery pages usually can't reset these accounts.
If recovery fails
- Try again with different information. Use older passwords, other email addresses you might have used, and a different familiar device.
- Check spam and old inboxes for provider security notices that may show which recovery address you added.
- Look for official support options. Free email providers often offer limited direct support, but their help centers explain current options.
- Avoid "recovery services" that promise quick access. They are often scams, and handing over account details gives someone else access.
If you can't get the account back, set up a new email address and update your important accounts, like banking, to use it. Tell your contacts so they don't trust messages from the old one.
If you think the account was hacked
If you also suspect that someone has obtained your password, follow the steps in our guide to checking and securing a possibly hacked email account.
- Once you're back in, change the password to a new, unique one.
- Sign out of all other devices and sessions from the account's security settings.
- Check forwarding rules, filters, and linked apps, and remove anything you didn't set up.
- Update the recovery email and phone number.
- Change passwords for other accounts that used the same password, starting with banking and shopping.
- Warn your contacts if scam messages may have gone out from your address.
How to prevent an email lockout
- Keep recovery details current. Add a working backup phone number and a second email address, and check them occasionally.
- Turn on two-step verification, preferably with an authenticator app or passkey rather than text messages alone.
- Save backup codes if your provider offers them, and store them somewhere safe and offline.
- Use a unique password for your email, ideally from a password manager. You can also check whether your password may have been exposed.
- Update saved passwords on all devices after you change your password, so old ones don't trigger repeated failed attempts.
- Sign in now and then to any email account you want to keep.
- Avoid bulk sending from a personal account. Use a proper mailing service for newsletters or large lists.
What to do next
Use the official recovery page for your provider, from a device and network you normally use, and give accurate answers. Once you're back in, secure the account right away with a new password, current recovery details, and two-step verification. If you can't recover it, move your important accounts to a new address so you don't stay dependent on the locked one.