Email lockouts are the second-worst tech support call (after WiFi). They are worse because real bills, real doctors, and real grandkids are in that inbox. Here is the recovery playbook for the four big providers.
Before you start
Gather these from your parent before you touch the recovery screen:
- Their email address.
- The phone number they registered with the account (might be an old one).
- Any recovery email address they set up.
- The last password they remember (even partially).
- Approximate year they created the account.
If any of these are missing, recovery still works but takes longer.
Gmail
Gmail is the easiest of the four to recover.
- Go to accounts.google.com/signin/recovery.
- Enter the email address.
- If their recovery phone number is current, Google sends a code. Type it in. Pick a new password.
- If the recovery phone is old, click "Try another way." Google will try recovery email, then security questions, then asking for "the last password you remember."
Trap: Do not abandon the flow halfway. Google's recovery gets easier the further in you go. If it says "we cannot verify," click "Try another way" again. There are usually 3 or 4 fallback paths.
Yahoo
Yahoo has the largest senior user base and the most painful recovery.
- Go to login.yahoo.com/forgot.
- Enter the email address.
- Yahoo will offer recovery phone or recovery email.
- If neither works, click "I do not have access to any of these."
- Yahoo asks for the last password remembered. Try several.
- If that fails, Yahoo will offer to email a recovery link to an alternate address.
Trap: Yahoo locks the recovery flow after 3 failed attempts in 24 hours. If you get locked, wait a full day and try again. Do not keep hammering it.
AOL
AOL is now owned by Yahoo, so the recovery flow is similar. Go to login.aol.com/forgot and follow the same steps as Yahoo. The same 24-hour lockout applies.
If your parent has an AOL account from before 2015, the recovery info is often very stale. Be ready for the "this is hopeless" feeling.
Outlook / Hotmail / Live
- Go to account.live.com/password/reset.
- Enter the email address.
- Microsoft sends a code to recovery phone or email.
- If neither is available, Microsoft has an "account recovery form" that asks for: contact info, recent emails sent, subject lines you remember, etc. Fill it out as completely as possible. Takes 24 to 72 hours to review.
Trap: The Microsoft recovery form requires you to email recent contacts. If your parent has not used the account in 6 months, this gets hard.
The "give up and create new" path
If the email is more than 10 years old, was never used for important things, and recovery is failing, sometimes the right answer is "create a new email and migrate." Especially if it is an AOL or Yahoo account being kept for sentimental reasons.
The new email should be Gmail or iCloud. Both are more reliable for recovery if it happens again. Help your parent migrate by:
- Set up the new account.
- Forward their old inbox into the new one (most providers let you do this even when locked, if you can briefly access the old account).
- Update logins on bank, healthcare, and family contact lists.
The prevention move
After recovery, set up the new password securely:
- Write it on paper and put it somewhere they will not lose. Old-school. Works.
- Make sure their recovery phone is their current number, not a number from 2014.
- Set a recovery email that you control or that they have access to.
- Turn on two-step verification if they can handle it. Skip if it will lock them out again.
The recurring fix
Account lockouts are a regular event for aging parents. The pattern: they get a "verify your account" scam text, panic, change their password to something they cannot remember, then lock themselves out. The scam protection part is upstream of the recovery part.
Kinline catches the "verify your account" texts before they are acted on and alerts you. The lockouts that do happen, Kinline walks your parent through recovery on the phone. No more "Mom is locked out of her email and the bank statement is in there" panic calls.
For the related scam pattern, see how to tell if an email asking for money is real or a scam.