The short answer

Protect administrator accounts with multifactor authentication and document the provider’s approved recovery process.

Open laptop, pens, and sticky notes on a wooden desk surrounded by houseplants.
Illustrative stock photo · Photo: RDNE Stock project / Pexels · Pexels License

Plan recovery before the emergency

Check the current account settings, enroll supported factors and store recovery material in a restricted location. Keep business ownership and recovery contacts current. Do not share one person’s login as a substitute for separate authorized accounts.

FTC guidance explains that MFA makes account takeover harder if a password is stolen. [1]

Test recovery planning without disabling your working factor. The backup manager should know whom to contact and what authority is required, not receive an unsecured copy of your codes in an ordinary email.

Sources

This article was generated by AI using the sources below. Editorial standards.

  1. How To Recognize and Avoid Phishing Scams — FTCSupports the attributed passage: FTC guidance explains that MFA makes account takeover harder if a password is stolen. The practical workflow and labeled examples are the publication’s own applications, not source-reported cases. Source checked Sep 8, 2026.

Have a correction? See our editorial policy and correction process.