How can you support LGBTQ+ account recovery without taking over someone’s digital identity?

Account loss can threaten context and identity

An account may hold conversations, work, contacts, photos, a chosen name and spaces where a person presents differently. For an LGBTQ+ person, losing access may create risks of fraud, unwanted disclosure, outing or contact by an abusive person—not only lost files.

Trans, travesti, non-binary, femboy, gay, lesbian and bi experiences are different, not synonyms. Ask what is at risk and what must not appear during recovery without inferring identity from appearance or a profile.

Agree on the helper’s role before touching the process

The account holder remains the decision-maker. You may read instructions, record times, organise official links, offer a device for research or accompany a report. Never ask for a password, authentication code, recovery key, full identity document or permanent access.

Set one task and a boundary: you research the official route while they complete the form, or record suspicious changes while they close sessions. If coercion or abuse is involved, use an independent person and a safe device.

Contain risk before repeating attempts

Identify the root account—often email, phone number or password manager. Check that the device is updated and has no obvious malware signs. Avoid repeated guesses, links received in messages and paid services claiming they can recover the account.

Open recovery by typing the provider’s official address or using the known app. Record login notices, changed recovery details and unauthorised messages. Preserve evidence without reposting conversations, photos, legal names or location.

Prove ownership without forcing disclosure

Answer only what the official channel requests and provide the minimum needed. A public name may differ from an identity document; that does not authorise a helper to explain identity, transition or orientation. If an ID is required, verify the domain and whether irrelevant fields may be covered.

The holder submits the form and keeps the reference. A helper can review wording but must not invent answers, install their own phone as permanent recovery or impersonate the holder. Codes belong to the holder and should not be forwarded.

Warn contacts without amplifying harm

If the account is sending messages, use another channel for a short notice: the account is compromised, do not open links or send money, and wait for confirmation. There is no need to explain a former name, identity, relationship, private content or suspected cause.

Record fake profiles with URLs and full screenshots. Ask contacts to report the correct profile without publicly spreading images and identifiers. For threats, blackmail or intimate-image abuse, preserve evidence and seek appropriate regional support.

After recovery, the holder takes back every control

The holder changes to a unique strong password, signs out unknown sessions, reviews recovery email and phone, and enables two-factor authentication. Check forwarding rules, connected apps, keys, devices, messages and posts they do not recognise.

Remove your device, phone or email from temporary steps. Delete unneeded screenshots and documents and confirm no session remains open. Safe help ends with less access for the helper, not a new dependency.

If recovery fails, preserve continuity without taking authorship

The person may create a new account, notify contacts gradually, restore files from their own copies and report the old account for impersonation. Agree on a low-disclosure proof of continuity, such as a recognised channel or direct confirmation.

Do not bargain with intruders, buy recovery services or pressure the person to change name, image or disclosure level. The goal is to restore choices and reduce harm; use official specialist support for financial loss, physical threats, stalking or extortion.

• Define what is at risk and must remain private.
• Use official recovery routes only.
• Never request passwords, codes, keys or permanent access.
• Preserve evidence without republishing personal data.
• Warn contacts with a minimal verifiable message.
• Review sessions, recovery details and forwarding after recovery.
• Remove the helper’s temporary access.
• If needed, move to a new account while keeping authorship with the holder.