Start with the delivery details
When a website asks for a verification code, it is usually checking that you can access a phone number, email address, or authentication app linked to your account. If no code arrives, pause before requesting another. First confirm which delivery method the page says it used. A code sent to email will not appear in your text messages, and a partially hidden address or phone number may help you recognize where to look.
For a text message, check that your phone has service and can receive ordinary texts. If you are traveling or have recently changed your number, the code may be going to a device you cannot use. For email, check your spam or junk folder and search for messages from the service. Make sure you are looking in the correct inbox, especially if you have several email addresses. If you use an authentication app, open it and check that you selected the entry for the right account.
Codes often expire, and several requests may leave you unsure which one is valid. Follow the website’s instructions about how long to wait, then request one new code if the option is available. Enter the newest code carefully. Avoid repeatedly pressing “send again” in quick succession; some services limit requests to protect accounts.
Try only the alternatives offered by the service
Look on the verification page for choices such as “try another method,” “use a backup code,” or “I can’t access this device.” Depending on how you set up the account, you may be able to receive a code by another channel, approve a sign-in on a trusted device, or use a recovery code you saved earlier. Available options vary by service, so follow the choices shown on its own website or app.
If you still have a device where you are signed in, check the account’s security settings before signing out. You may be able to update a recovery method there, although a service may ask you to verify your identity first. Do not change settings you do not understand simply to get past a sign-in screen. If the account belongs to a public service, an approved phone or in-person access route may also be listed on its official website.
When the contact information is out of date
A lost phone, changed number, or closed email account needs a different approach from a delayed code. Use the service’s account recovery process rather than trying to create a second account or asking someone else to receive codes for you. Recovery may involve confirming information you previously provided or following instructions from a support team. It can take longer than receiving a code, so allow time if you need the account for an upcoming task.
Find support by navigating to the service’s official website or app yourself. Avoid relying on a phone number in an unexpected message or a search result that only resembles the organization’s name. Explain that you cannot access the verification method on file, and ask what approved recovery options exist. If you have an account reference or a notice related to the service, keep it nearby, but share personal details only through a channel you have confirmed is legitimate.
If someone helps you use a device or contact support, keep control of your password and verification codes. A trusted person can help you read instructions or find the correct page without signing in as you. Where an account offers a formal way to authorize another person to help, use that process rather than sharing your login.
Protect your account and prepare for next time
Never give a verification code to someone who contacts you unexpectedly, even if they say they are from the service. A code is meant for the sign-in or recovery process you started. If a code arrives when you were not trying to sign in, do not enter it into a link from the message or pass it to a caller. Instead, visit the account through your usual route and review its security guidance.
Once you regain access, check that your phone number and email address are current. If the service permits it, add a backup method you can reliably use and save recovery codes somewhere secure but accessible to you. Consider whether your chosen method will still work if your phone is lost, your email becomes unavailable, or you need help using a device.
For important public-service accounts, keep a simple record of the official website address, the support route, and which recovery methods you have set up. Do not write down passwords or live verification codes in that record. A few minutes of preparation can make a future access problem easier to resolve without weakening your account’s security.
