If a phone or device is lost

Sign in from a trusted device, change credentials where appropriate and revoke or review active security methods. Administrators should remove access for departed staff rather than sharing accounts.