Recover your Discord password or account

Discord can ask for both a password and a second verification method. Resetting the first does not replace the second. Work out whether you have forgotten the password, lost the authenticator, or noticed someone changing the account. That distinction determines whether a reset email, a saved backup code, or a security report will help.

These instructions are for your account. A parent helping a younger user should work through the official process together and keep private codes out of chats. For a broader decision tree across services, see lost authenticator or phone; this page focuses on Discord's particular limits.

1. Reset the password through Discord

Open Discord's usual sign-in screen yourself and use its forgotten-password option for the email address attached to your account. Discord's compromised-account guidance directs users who can still receive the email toward resetting the password as an immediate recovery step.

Confirm that you can open the intended mailbox before requesting messages repeatedly. A Discord display name or server nickname may be different from the account email. If several people use the same computer, inspect your own account records instead of assuming that the browser's saved address belongs to you.

Choose a unique password after the official flow verifies you. Then return to sign-in and read the next prompt. If Discord asks for a multi-factor code, the reset has not failed merely because another check remains. Proceed with a method that was configured for this account.

2. Look for Discord backup codes or a working session

Discord's MFA lockout article describes backup codes saved when multi-factor authentication was configured. Search your own secure storage and downloads for the saved record, including a file named discord_backup_codes.txt. Each unused code is a credential, so do not upload the list to a helper or a server channel.

If Discord is still open on another device, the article explains how an authenticated session and your password may let you view backup codes in account settings. Keep that session available while you check. An already-open app is useful, but do not assume it authorizes every security change without further verification.

Discord backup codes have their own format and are not the same as an authenticator's changing six-digit code. Choose the backup-code option in the sign-in flow and enter an unused Discord code. A code generated for Google, Microsoft, or a different Discord account will not satisfy this check.

3. Use another factor only if you enabled it earlier

The official MFA guidance also covers alternatives such as SMS when that method was previously configured. If a text-message option does not appear, entering a new phone number elsewhere is not a way to attach it to a locked account. Use only the alternatives actually offered for your account.

If your authenticator was backed up or synchronized, its own recovery process may restore the Discord entry. Recovering the app and recovering the Discord account are separate operations. Check that a restored entry produces a code accepted by Discord before removing the old device or discarding backup material.

If you think someone else got in

Use the reporting route in Discord's hacked-account article. Secure the associated email and provide the account details the official support form requests. Keep any existing support correspondence together so you can distinguish an actual case from someone approaching you in a direct message.

Discord warns about people impersonating staff or support. Do not change your email address to one a stranger supplies, hand over a code, scan an unexplained login QR code, or pay someone to reverse a supposed report. A parent can help a young user slow down and verify the route without taking instructions from the person making the threat.

After you regain access

Review connected access and security settings. Create and store the current backup codes securely if the account's settings allow it, and mark any code you used as spent. Keep the recovery copy accessible independently of the phone holding the authenticator.

Login.com's Discord sign-in and security guide can help with the normal entry point after recovery. Before ending your working session, test the new password and a supported second method on another trusted sign-in. That check is more useful than discovering an incomplete authenticator migration during your next lockout.

Instructions checked against vendor guidance on 24 September 2026.