How to Avoid Getting Locked Out of Your Accounts Abroad in 2026: 2FA, Authenticator Apps and Backup Codes

The trip is booked, the bags are packed — and then, three days in, you try to log in to your bank or your email and it asks for a code it just sent to a phone number you can no longer receive on. You are now locked out of your own account, in a country where you most need it to work. It is one of the most common and least-talked-about ways a good trip goes sideways in 2026, and almost all of it is preventable with twenty minutes of setup before you leave home.

The core problem is that a lot of security is quietly wired to your home phone. When you swap to a foreign SIM or an eSIM, that home number often stops receiving texts and calls. The codes keep getting sent; you just never see them. Layer on a banking app that gets suspicious of a login from the other side of the world, an authenticator app that lived only on a phone now at the bottom of a river, and an email account whose "recover access" flow loops back to — you guessed it — that same unreachable number, and you have a genuine lock-out.

The four ways people get locked out — and the fix for each

Nearly every abroad lock-out is one of four failures. The good news is that the fix for all of them is done in advance, calmly, from your sofa.

Move off SMS codes — but keep your number reachable

An authenticator app is the single most useful change. Because it produces codes on the device itself from a shared secret set up once, it keeps working when you have no bars and no home SIM. Turn it on for your email and bank first, since those two unlock almost everything else. The catch is obvious once stated: if that phone is your only copy and it disappears, so do your codes. That is exactly what backup codes are for — print them, or save them in a password manager you can open on another device, before you travel.

Keeping your home number alive is the belt to the app's braces. Wi-Fi calling lets your normal number send and receive calls and texts over any internet connection, which means a code sent the old-fashioned way can still land while you are on hotel or teahouse Wi-Fi. Many carriers only let you switch it on while connected to their home network, so it is a before-you-go job. If you are weighing eSIMs, local SIMs and roaming to stay online in the first place, our guide to avoiding roaming charges abroad walks through the trade-offs, and if you plan to bank or log in over shared networks, read what actually protects you on public Wi-Fi first.

Tell your bank, and prepare for the worst case

Banks freeze accounts that suddenly log in from abroad because, most of the time, that is fraud. A quick heads-up with your dates and countries usually prevents it; save the bank's international contact number offline too, because their app may be the thing that is locked. And plan for a lost phone: know your account passwords independently of the device, keep a written list of recovery contacts and emergency numbers on paper, and if the worst happens, our guide to a lost or stolen phone abroad covers locking and reporting it.

Why this matters double in Nepal

On a Himalayan trek this stops being theoretical. Once you leave Kathmandu or Pokhara for the trail, you can go days with no signal from your home SIM — and where there is connectivity it is often teahouse Wi-Fi, not mobile data. If your bank or email insists on texting a code to a number that cannot ring above Namche or in the Manaslu valley, you are locked out until you descend. Set up an authenticator app and save your backup codes before you fly, keep Wi-Fi calling on, and carry your recovery details on paper in your pack. Do that and the mountains stay the only thing off-grid. Planning a trip where you will be out of range for a week or more — the Manaslu Circuit, Everest Base Camp or Annapurna Base Camp? Our team is happy to talk through what to sort out before you land.

Cover photo: Pixabay via Pexels (Pexels License).