How to Reset Facebook Password with a Recovery Code (2026 Guide)

-->

Resetting a Facebook password with a recovery code in the mobile app (2026 guide).

How Do I Reset My Facebook Password Using a Recovery Code or Trusted Contacts in the Facebook App?

Last updated: July 2026  |  By App World Team

Getting locked out of Facebook is one of the most common — and most stressful — problems people run into on their phones. Maybe you forgot your password after a long time away from the app, maybe you switched phones and lost your saved login, or maybe someone else tried to get into your account and Facebook flagged it for extra verification. Whatever the reason, the fastest fix usually comes down to two things: a recovery code and, in some cases, help from people you trust.

This guide walks through exactly how Facebook's account recovery works inside the mobile app right now, in 2026, including where a recovery code actually comes from, why you may have read outdated advice about "Trusted Contacts," and what to do if none of your saved recovery information still works.

Quick Answer

To reset a forgotten Facebook password in the app: open the Facebook app, tap Forgot password? on the login screen, confirm your account with your email, phone number, or username, then choose how you want to receive a verification code (SMS, email, or an authentication app). If you previously turned on two-factor authentication, you can also use one of the backup recovery codes you saved at setup instead of waiting for a new code. Facebook's older "Trusted Contacts" feature, which let friends help you recover an account, has been phased out and is no longer part of the current recovery flow — more on that below.

---

Understanding Facebook Account Recovery in 2026

Facebook (part of Meta) has steadily consolidated its login and security tools into the Accounts Center and a small number of recovery paths that are designed to work whether you're using the app, a mobile browser, or a desktop. The two recovery tools people ask about most are:

• Recovery codes — one-time backup codes generated when you set up two-factor authentication (2FA). These still exist and are the closest thing to a guaranteed way back into your account if you lose access to your authentication app.
• Trusted Contacts — an older feature that let three to five friends help verify your identity if you lost access to your email and phone at the same time. This feature has been discontinued.

Mixing these two up is the single biggest source of confusion in older tutorials still floating around the web. Below, each is explained on its own, starting with the one that actually works today.

What Is a Facebook Recovery Code, Exactly?

A Facebook recovery code is a short backup code tied to two-factor authentication, not to your password directly. When you enable 2FA on Facebook — through Settings & privacy → Settings → Accounts Center → Password and security → Two-factor authentication — the app gives you the option to generate a set of single-use backup codes. Each code can be used once, in place of the six-digit code your authenticator app would normally generate, to prove it's really you logging in.

If you saved those codes somewhere safe (a password manager, a printed sheet, a secure note), you can use one during login or during password recovery whenever Facebook asks for a "second step" and your usual authentication app isn't available.

It's worth being clear about what a recovery code is not: it is not a substitute for knowing your account's email address or phone number, and it does not skip Facebook's identity checks entirely. It simply replaces the authentication-app step of the process.

Step-by-Step: Resetting Your Password With a Recovery Code in the Facebook App

1. Open the Facebook app and go to the login screen. If you're already logged in on the device, log out first, or go to Settings & privacy → Settings → Accounts Center → Password and security → Change password instead (this skips recovery entirely if you're already signed in).
2. Tap "Forgotten password?" below the password field.
3. Identify your account. Enter the email address, phone number, or username linked to the account. If you're not sure which one is still active, try each option — Facebook will match whichever one it recognizes.
4. Choose how to receive your first code. Facebook will usually offer to text a code to your phone or email a code to your registered address. Select whichever one you can still access.
5. Enter the code you receive, then tap Continue.
6. If two-factor authentication is turned on, Facebook will ask for a second verification step. This is where your backup recovery code comes in: tap "Try another way," then select the option for entering a backup code instead of an authenticator app code. Type in one of your saved codes exactly as it was given to you.
7. Create a new password. Choose something unique that you haven't used on Facebook before, ideally generated by a password manager. Facebook will confirm the change and usually log you into the app automatically.
8. Review your login activity. After a reset, it's worth checking Settings & privacy → Settings → Accounts Center → Password and security → Where you're logged in, and signing out of any device you don't recognize.

If the app version of this flow gets stuck — for example, the reset screen loops back to itself or a code never arrives — Facebook's browser-based recovery tool at facebook.com/login/identify is generally more reliable and is worth trying from a mobile browser even if you started in the app.

What Happened to Facebook's "Trusted Contacts" Feature?

If you've searched for Facebook password recovery before, you've probably seen instructions involving "Reveal My Trusted Contacts," where friends would receive a code on your behalf and read it back to you. That feature was real, but Facebook began phasing it out several years ago, and recent reporting confirms it has now been fully removed from the recovery flow. You will no longer see an option to recover your account through friends when you go through "Forgotten password?" in the app.

Meta has not published a detailed public explanation for retiring Trusted Contacts, but the shift lines up with a broader move toward automated, device- and code-based verification (SMS, email, authenticator apps, and identity document checks), which is faster and harder for scammers to socially engineer than asking a friend to relay a code over text or Messenger.

What this means for you: if an article, forum post, or video tells you to click "Reveal My Trusted Contacts," that instruction is outdated. Don't spend time hunting for a setting that no longer exists — and be cautious of anyone who messages you claiming to be a "trusted contact" needing a code from you, since that pattern is now more commonly seen in phishing attempts than in genuine recovery.

No Recovery Code and No Access to Your Email or Phone? Here's What Actually Works

Losing your recovery codes at the same time as losing access to your email and phone is the hardest scenario, but it isn't hopeless. Try these in order:

1. Log in from a familiar device. If you're still logged into Facebook on an old phone, tablet, or browser, use that session to update your email, phone number, and password before anything logs you out — this is the fastest fix by far.
2. Try every email and number you've ever used. Facebook's account-search tool at facebook.com/login/identify lets you enter several variations. People often forget an old email they used when first signing up years earlier.
3. Use "No longer have access to these?" On the recovery screen, this option lets you provide an alternate email address for Facebook to contact you at while it verifies your identity another way.
4. Submit identity verification. As a last resort, Facebook may ask for a photo of a government-issued ID to confirm the account belongs to you. This is manually reviewed and can take longer, but it is currently the main fallback once codes, email, and phone access are all unavailable.
5. Check Facebook's Help Center for hacked-account recovery if you suspect someone changed your password, email, or phone number without your permission — this path is separate from a simple forgotten-password flow and includes extra fraud checks.

Common Errors During Facebook Password Reset (and How to Fix Them)

1. The reset code never arrives

Check your spam or junk folder if you chose email, and confirm your phone has signal if you chose SMS. Wait at least five minutes before requesting a new code — repeatedly requesting codes can sometimes trigger a temporary cooldown.

2. "This browser or app isn't recognized"

This is a normal security prompt, not an error. Confirm the login attempt is really you by approving it from another logged-in device if you have one, or continue through the code-based verification.

3. You changed your password but still can't log in

This usually points to a second-factor check. Look for a prompt about "checking notifications on another device" — if you don't have another device logged in, use your backup recovery code instead of waiting on a push notification.

4. You lost access to your authenticator app entirely

If you never saved backup codes, and your authenticator app (Google Authenticator, Microsoft Authenticator, Duo, etc.) is gone along with your old phone, your best option is submitting an identity-verification request through Facebook's Help Center, since there is currently no way for Facebook support to manually bypass 2FA without confirming ownership first.

How to Avoid Getting Locked Out Again

A few minutes of setup now saves hours of frustration later. Once you're back into your account:

• Generate and save fresh backup recovery codes the moment you regain access, especially if you had to use one to get back in — used codes can't be reused.
• Keep your email and phone number current in Accounts Center → Personal details, and remove any old numbers or addresses you no longer control.
• Turn on two-factor authentication if it isn't already active — it's one of the strongest protections against someone else guessing or stealing your password.
• Store recovery codes outside of Facebook, in a password manager or another secure, offline location — not just as a screenshot on the same phone you use to log in.
• Use a unique password for Facebook that you don't reuse on other sites, so a breach elsewhere doesn't put your Facebook account at risk too.
• Review login activity periodically under Password and security → Where you're logged in, and log out of devices you no longer use.

Frequently Asked Questions

Does Facebook still offer Trusted Contacts for account recovery?

No. Trusted Contacts has been discontinued and no longer appears as an option in the "Forgotten password?" recovery flow. Current recovery relies on email, phone, authentication-app codes, saved 2FA backup codes, and, where needed, identity verification.

Where do I find my Facebook recovery codes?

They're generated when you first turn on two-factor authentication, under Accounts Center → Password and security → Two-factor authentication. If you didn't save them at the time, you can generate a new set once you're logged in, but you can't retrieve the original ones after they've been used or replaced.

Can I reset my password without email or phone access?

Yes, though it's harder. Try logging in from a device you've used before, use the "No longer have access to these?" option during recovery, or submit an identity verification request through Facebook's Help Center as a last resort.

How long does a Facebook password reset take?

If you have access to your email, phone, or a saved recovery code, the reset itself usually takes just a few minutes. Identity-verification reviews, used only when other methods fail, can take longer since they're checked manually.

Is it safe to reuse my old Facebook password after resetting?

Facebook may technically allow it, but it isn't recommended. If your account needed recovery because of a suspected compromise, reusing the same password defeats the purpose of resetting it — choose a new, unique password instead.

Final Thoughts

Facebook's account recovery process has changed noticeably over the past few years, and the shift away from Trusted Contacts toward code-based and identity-based verification means the fastest path back into a locked account today is almost always a saved backup recovery code, an active email or phone number, or a device where you're still logged in. Take a few minutes now — while you have access — to confirm your recovery codes are saved somewhere safe and your contact details are current. It's the single best way to make sure a forgotten password is a minor inconvenience rather than a real lockout.

---

This article was researched and written by the App World Team for general informational purposes and reflects publicly available information about Facebook's account recovery process as of July 2026. Facebook's tools and settings can change over time; for account-specific issues, always refer to Facebook's official Help Center.