IDENTITY LOCKOUT
Digital Identity Emergency Plan: Recover Email, Phone, Banking and Core Accounts in the Right Order
Digital identity is a chain of dependencies: email resets passwords, phone numbers receive codes, cloud accounts store documents and banking apps control money. An emergency plan maps those dependencies before an attacker or outage forces you to discover them in real time.
This guide is about verification, protection, continuity and recovery. It does not provide instructions for committing fraud or cyber intrusion.
The immediate answer
Write down your recovery order before anything goes wrong: primary email, mobile number, banking, password manager, cloud storage, work accounts and other critical services. Keep official provider contact routes offline and protect recovery codes so you are not dependent on the same compromised device to regain access.
Map the root accounts
Start with the accounts that can reset or unlock others. For most people that is primary email, mobile service, Apple/Google/Microsoft account and password manager. List which services depend on each one. If a single email account controls banking alerts, cloud documents, shopping and social media recovery, treat it as critical infrastructure. The purpose of the map is to show where one compromise could cascade before the emergency happens.
Keep an offline recovery pack
Store key provider phone numbers, account references where appropriate, recovery instructions and emergency contacts offline. Recovery codes can be valuable, but they are sensitive and should be protected like credentials rather than left in an obvious folder. The pack should let you begin recovery even if your normal phone is lost, your email is inaccessible or the cloud is unavailable. Review it when you change providers or important accounts.
Secure the phone-number pathway
A mobile number often sits in the middle of account recovery. Use your provider’s available account security and know how to contact them if your SIM stops working unexpectedly. Be cautious about sudden loss of service combined with login alerts elsewhere. Where a service supports phishing-resistant authentication that does not depend on SMS, consider using it for high-value accounts. The goal is to reduce the number of systems that fail when one number is hijacked or unavailable.
Recover in consequence order
During a lockout, people often start with the account they notice first rather than the account that controls the rest. Prioritise email and authentication infrastructure, then financial accounts, then cloud/work services, then lower-consequence accounts. Use a known-clean device for recovery if you suspect malware or account-session theft. Change reused credentials, revoke unknown sessions and review forwarding rules before assuming the account is secure again.
Protect documents without creating a new single point of failure
Identity documents, insurance details and emergency records may need to be available during travel or disruption. Keep secure copies in more than one appropriate place, including an offline option, while avoiding unnecessary exposure. Encrypt sensitive digital storage where practical and limit who can access it. A resilience plan should improve availability without turning a stolen USB stick or shared folder into an identity-theft kit.
Rehearse one lockout scenario
Once a year, imagine your phone is gone and your primary email is inaccessible. Can you identify the first provider to contact? Do you know the account number or recovery route? Can a trusted person help without having your passwords? This short exercise reveals brittle dependencies. Fixing one missing phone number or outdated recovery email now is far easier than improvising during a real compromise.
Continue from here
Build this topic into a wider plan, then see how the same dependency could fail in an AI-collapse scenario.
Evidence desk
These guides use current UK cyber and fraud-prevention guidance. AI-enabled voice cloning and deepfakes are treated as real fraud techniques, while any wider collapse consequences are labelled as scenario analysis.
OFFLINE FALLBACK
If identity, payments and communications fail together, paper and offline systems matter.
The 72-hour field manual covers power, communications, money, food, water and the practical information your household needs when digital systems stop cooperating.
Continue
More Cyber & Digital Resilience guides → · Communications survival →