Your main email: the account that recovers all the others
Your main email is the one you put down as the recovery address for your bank, your social media and almost everything else. If it goes down, it doesn't go down alone: it takes with it any account that depends on it to recover.
Short version: it doesn't matter which provider (Gmail, Outlook, iCloud, Proton or a custom domain): if it's the email you use to recover other accounts, it needs to be recoverable itself without depending on whatever phone you happen to have at the time, or on another account of yours that's just as fragile.
Why this account is critical
Look at how many things ask you for "a contact email" or "recovery email": your Google account, your Apple ID (which can use any provider), your bank, your social media. Almost all of them end up pointing to the same inbox. If that inbox stops responding, each of those accounts loses its best way back.
There's a common trap: many people know exactly which email is their "main" one for sending and receiving mail, but aren't clear on which one actually works as the recovery email everywhere. You might use one address daily, while your bank or Apple account has an older one saved that you barely ever check. That second address, the one almost nobody checks, is the one that really matters the day you need to recover something.
What an email provider asks for from a new phone
It depends on the provider, but the pattern repeats: password plus a second factor (SMS code, authenticator app, or a push to a device where you already had a session). If that second factor only lives on the phone you've lost, the email gets locked just like any other account with the same problem.
The risk multiplies when the email isn't just your inbox, but also your sign-in system: if you use "Sign in with Google" or "with Apple" on other sites, losing your email drags down everything you logged into that way too. It's worth knowing, for the accounts that matter most to you, which ones depend on your email to sign in directly and which only use it to recover if something goes wrong: they're not the same thing.
What recovery paths each type offers
There's no "perfect" provider: each one spreads the risk differently. What is universal is the question you need to ask yourself with any of them: if you lose your phone today, what path do you have left to get back in without it?
| Provider | What's good | The extra risk |
|---|---|---|
| Gmail (Google) | Downloadable backup codes, trusted devices | If your recovery is another Gmail account, it can form a circle |
| Outlook / Hotmail (Microsoft) | Several security contact methods at once | No downloadable backup codes: depends on having those methods accessible |
| iCloud Mail (Apple) | Recovery contact, recovery key | Tied to having an Apple device and a trusted number |
| Proton Mail or other encrypted providers | Less dependence on a specific phone ecosystem | Their own recovery paths still need setting up, they're not automatic |
| Custom domain ([email protected]) | You don't depend on a particular provider's name | If the domain expires because you don't renew it, the email that depends on it stops working |
The custom domain case deserves one more line: a domain isn't an email account with a password, it's a name you lease each year or every few years from a registrar. If you let it expire, it stops pointing to your inbox, and that can't be fixed by logging in anywhere: you need to renew it or, if someone else has already bought it, it's practically impossible to get back. If your email is tied to a domain, knowing who manages it and when it's due for renewal matters just as much as the email password itself.
What to check today
- Do you know which email you use as recovery for your bank, your social media and your Google or Apple account?
- Is that recovery email itself easy to recover without your phone?
- If you use a custom domain for your email, do you know when it expires and who renews it?
- Do you have a second way to access your email that doesn't depend on your current phone?
- Does any important site use "Sign in with Google" or "with Apple" instead of its own password?
If you can no longer get in
Use the specific provider's official recovery process: Google and Microsoft have account recovery forms (see Google and Microsoft); for Apple, the process goes through iforgot.apple.com (see Apple). If you use a custom domain and the problem is that it's expired, the way forward is contacting your domain registrar, not your email provider.
If you use Proton Mail or another encrypted provider, check its own help page first: because of end-to-end encryption, some of these providers can't simply "reset" your access the way a conventional provider would, and whatever recovery paths you set up beforehand (recovery phrase, external recovery email) matter even more than they do with Gmail or Outlook.
While you work through any of these processes, keep in mind that everything using this email for recovery will take just as long to be recoverable: it's not worth trying to recover ten accounts in parallel while the root email is still locked. Email first, everything else after — though the exact how of that order is precisely what we cover in the workshop (coming soon).
Official sources (Spanish-language help pages, same features documented in English): Recover a Google account · Two-step verification for Microsoft accounts