Skip to main content
Start free
Start free

What should a landlord do right after losing a phone that runs their rentals?

DoorKeeping team

3 min read

Lock or erase the phone from another device, call your carrier, then change the passwords for your email, bank and rent accounts in that order, and revoke sessions for lock apps and software. Your email comes first, because it can reset every other password. Then tell anyone who might receive suspicious messages from your number. A phone with a screen lock and two-factor sign-in on your accounts turns a bad day into a small one.

What a landlord's phone really holds

For a small landlord the phone is the office. It has the bank app, the rent portal, the email with every lease and application, the texts from tenants, the codes for smart locks and the authenticator app that approves other logins. Losing it is a business event, not only a hardware problem.

Most phones also hold photos of leases, receipts and keys, and a note with the gate code. Think of those as the second layer. Once your accounts are locked, go through the photos and notes in your head and change any code or key detail the phone could reveal.

The good news is that most of this sits in accounts, not on the device. Your job in the first hour is to cut the phone off from those accounts.

The first hour, in order

  1. Use another device to find the phone with your phone maker's locate service, and mark it lost or erase it.
  2. Call your carrier. Ask them to suspend the line and to add a port-out or SIM change lock, so nobody moves your number.
  3. Change your email password and sign out of all sessions. Do this before anything else, because your email resets the other accounts.
  4. Change the bank password, then the rent portal and accounting passwords.
  5. Remove the lost phone from your list of trusted devices in each account.
  6. Revoke the phone's access in your password manager and smart lock apps, and change any lock code the phone could show.

If the phone held your only authenticator app, use the backup codes you saved. If you did not save any, each service has a recovery process that takes longer. Save backup codes next time.

Protect your tenants

The phone held tenant names, numbers and messages. If it was locked with a strong passcode and encrypted, which is the default on current phones, the risk is low. If it had no passcode, or you saw sign-in alerts afterward, treat it as a possible exposure of tenant data and check your state's breach notice rules. Our post on tenant data breaches explains the basics.

Warn tenants only when it matters. A short message from a new number, "I lost my phone, please ignore messages that ask for money from my old number," stops a fake-rent text before it works.

Why the phone number matters

A thief who controls your number can receive your text message codes. The FCC adopted rules in 2023 that require wireless carriers to notify customers when a SIM change or port-out request is made and to add protections against these swaps. A carrier lock on your account and an authenticator app or security key in place of text codes close this door.

CISA recommends multifactor authentication on important accounts and says it is among the most effective steps you can take. Apps that generate codes are stronger than texts because they do not depend on your phone number.

Ten minutes of preparation now

  • Set a long screen passcode and enable device encryption.
  • Turn on the locate and remote erase feature.
  • Save backup codes for your email, bank and rent software in the password manager or on paper at home.
  • Write down your carrier's account PIN.
  • Keep the list of accounts you would change, in order, where you can reach it from another computer.

In DoorKeeping, anything that moves money or sends a legal notice waits for your one-tap approval, so a thief needs your signed-in account, not only a phone number. DoorKeeping never holds your money.

Sources

  1. CISA, More than a Password (multifactor authentication), read Oct 30, 2026
  2. Federal Register, Protecting Consumers from SIM-Swap and Port-Out Fraud, read Oct 30, 2026
  3. FTC, Cybersecurity for Small Business, read Oct 30, 2026

Questions

Which account do I secure first?
Your email, because it can reset the password of nearly every other account.
Do I have to tell tenants my phone was lost?
Not always. If the phone was locked and encrypted, a short heads-up about messages from your old number is usually enough.
Should I use text message codes?
An authenticator app or security key is stronger, because a text code follows your phone number.

Keep reading