Skip to content
Security

How long account recovery takes

Account recovery is a queue, not a conversation. When you cannot pass the normal sign-in checks and submit a recovery request instead…

Security2 min read

support agent — illustration for “How long account recovery takes”
Photo: DefPuebloCABA - Centro de contacto — Defensoría del Pueblo de la Ciudad de Buenos Aires, CC BY-SA 4.0 (Wikimedia Commons)
On this page
  1. What the timer is actually doing
  2. What helps, and what backfires
  3. What support can and cannot do

Account recovery is a queue, not a conversation. When you cannot pass the normal sign-in checks and submit a recovery request instead, it goes into an automated review that runs on its own schedule, and a message to support will not move it forward.

What the timer is actually doing

The review compares what you submitted against what the platform already knows about you: the devices that have signed in before, the addresses and numbers on the account, the location the request came from and how long each of those has been in place. Large providers describe the wait in the same shape — an acknowledgement within a day, then a decision that can take several days, longer if anything about the request looks unusual.

The delay is deliberate. A recovery flow is the one door into an account that does not need the password or the second factor, so it is also the door an attacker would pick. The waiting period exists to give the real owner time to notice the attempt and cancel it from a device that is still signed in.

What helps, and what backfires

Submitting from a device and network that have signed into the account before is the single strongest signal you can give. So is answering from an address or number that has been attached to the account for a long time, rather than one added this week.

Repeating the request does the opposite. Multiple submissions in quick succession look like an attack and can extend the cooldown instead of shortening it. Removing every recovery method from an account before you have a new one working is the other common mistake: on several large services that alone starts a waiting period of weeks.

What support can and cannot do

Front-line support has no button that skips the review. Agents can confirm that a request was received and check that it was filed against the right account, and that is close to the limit of it. Providers say plainly that contacting them does not shorten recovery time.

What they can do is tell you whether the request failed outright, which is worth knowing: a failed request usually has to be resubmitted with different evidence rather than waited out. Until then, the useful work is preparation for next time — a recovery contact, a second factor on a device you still hold, and backup codes stored somewhere other than the phone they unlock.

More from Security

All stories
card uv — illustration for “How to spot unsafe sites”
Security

How to spot unsafe sites

It is possible to enjoy online casino games while remaining safe. This guide lays out easy, straightforward steps anyone can take to keep themselves safe.