Say you just handed your old phone to the recycling drop-off, and now your new one won't let you sign into Gmail because the verification code went to a phone you no longer have. It happens more than you'd think. Here's how to secure a Google Account before changing phones, and skip that headache entirely.
Start with Google's Security Checkup
While you can still sign in on your current phone, open Google's Security Checkup. It's a ten-minute walk through the settings that actually matter during a phone switch: your recovery email and phone number, which devices are signed in, and how you complete two-step verification.
Make sure your recovery email still works and isn't tied to the very account you're trying to protect — a separate personal email is the safer bet. This is the practical takeaway: do this checkup before you touch the new phone, not after.
See who else is signed in
Under Your devices, look through the list. You should recognize everything — your phone, your laptop, maybe a tablet. Sign out anything you don't recognize.
This is also the moment to retire an old phone you're giving away or selling — but wait until the new phone is fully working first. Keeping one working device signed in gives you a safety net if setup goes sideways.
Make sure your second step doesn't live only on the old phone
Open 2-Step Verification. The point is simple: don't let your only backup method disappear with the phone you're about to erase.
Google offers a few options — prompts, an authenticator app, passkeys, or backup codes (see Google's 2-Step Verification guide). A good setup uses more than one. Never read a verification code to anyone who calls asking for it, no matter how official they sound.
Passkeys use your fingerprint, face, or PIN instead of a typed password — convenient, but check Google's passkey help page so you know where it's saved.
Print or save fresh backup codes
Generate a new set of backup codes and keep them somewhere other than the phone you're replacing — a password manager, or a locked file. Treat them like spare house keys: never a screenshot in an unlocked photo app.
Test the new phone before wiping the old one
Set up the new phone, sign in, and actually test Gmail, Photos, and a 2-Step Verification prompt while the old phone is still around as backup. Only after everything checks out should you sign out of the old phone and reset it using the manufacturer's process — signing out of Google alone doesn't erase your files.
A written checklist beats trying to remember all this from memory; our guide to using ChatGPT Voice for an action plan shows a quick way to turn a spoken plan into one without sharing anything sensitive.
Put a Security Checkup on your calendar a couple of times a year, not just when you switch phones — same logic as keeping a family emergency kit ready before you need it. Do the review, verify the new setup works, then let the old phone go.