How to Respond When an MFA Device Is Lost or Replaced

Replacing an authentication device can create both account lockout and account takeover risk.

Checks to make

Verify identity through an approved recovery path, revoke the lost factor and active sessions when warranted, issue a new factor, and review recent sign-in activity. Avoid bypassing controls through an unverified phone request.

When to get help

Identity support can improve secure recovery and MFA lifecycle procedures. Informatix Systems can assess the symptoms, evidence, and next steps. Contact Informatix Systems to discuss this issue.