A passkey can sign you in to PayPal using a device unlock such as a fingerprint, face check or PIN. Losing the device does not necessarily lose the account: PayPal says a password or one-time passcode may still provide a recovery route. A saved passkey on a stolen device is generally protected by that device's unlock mechanism, but its presence should still be reviewed. The safest process is to regain account access from a trusted device, remove the lost device's passkey and secure the device ecosystem that may sync it.
Before you start
Use a device and network you trust. If the lost phone may be unlocked or your password manager is compromised, secure that ecosystem first and follow the platform's lost-device process. Know which Apple, Google or other password manager holds the passkey. Never give a one-time code to someone claiming to help recover PayPal.Do it step by step
- Open PayPal through its official app or a typed website on the trusted device. Use another existing sign-in method if the lost passkey is unavailable. If you cannot enter, follow PayPal's official account-recovery route rather than a search-ad support number.
- In PayPal security settings, review the passkeys or saved login methods associated with the account. Identify the entry tied to the lost device; do not remove a working replacement before you have another way in.
- Add a new passkey on a device you control if supported, then test a fresh sign-in. Note which credential provider syncs it and whether another trusted device can use it. Keep the linked email and any remaining password protected.
- Delete the old passkey from PayPal. PayPal also advises deleting it from the password manager holding the credential. If the device is lost, use the manager's device-management and remote-lock tools as applicable rather than assuming PayPal deletion erases the local record instantly.
- Review recent account activity, stored cards and automatic payments for anything you do not recognize. A lost device might have active sessions or notification previews even if the passkey itself was protected.
- Sign out of unneeded sessions where the account offers that control, update related device and email security, and monitor for alerts. If money moved without authorization, open the correct transaction in the Resolution Center promptly.