An Account Recovery Plan to Build Before You Get Locked Out

Monday, 8:12 a.m. The internet director cannot get into the Facebook account that posts the store's Marketplace inventory. The password was changed overnight. The recovery email bounces. The phone number on the account belongs to a used-car manager who left in March. Floor reps are already walking the lot with phones, waiting for the queue to start. Aged units that should have been live before lunch sit in draft while the GM tries to guess which "Forgot password" path still works.

That is not an IT inconvenience. It is a sales-channel outage. Facebook Marketplace is how a large share of independent and franchise stores put used inventory in front of local buyers, and a single locked account can freeze posting, messaging, and listing edits at the same time. The stores that recover in hours are not lucky. They already had an account recovery plan.

This guide is for general managers, internet directors, and used-car managers who need a written recovery process before the lockout, not a scramble after it. It covers what to document, how to set up recovery paths while you still have access, what to do in the first hour of a lockout, and how to keep posting from collapsing when one login dies. It is operational guidance, not a substitute for Meta's current account-recovery flows. Check Facebook's own help pages when you execute a reset.

Why an Account Recovery Plan Matters Before You Are Locked Out

Most dealerships treat Facebook access as a personal habit rather than a business asset. One person created the Page years ago. Another person enabled two-factor authentication on a personal phone. A third person posts from a shared laptop behind the tower. Nobody wrote down who owns what. The first time that arrangement fails is the first time leadership notices it existed.

What a lockout actually stops on the floor

A locked Marketplace-capable account is not only a login problem. It typically blocks:

• New vehicle posts to Marketplace, the profile, and groups.
• Edits to live listings (price drops, photo swaps, sold status).
• Messenger threads already in progress with buyers.
• Appeals or policy notices tied to that account.

If that account is the only posting identity the store uses, the entire internet desk pauses. If several reps share it, the pause is worse: everyone is locked out together, and nobody can prove who last changed the password. Shared logins are a recovery problem as much as a security problem. See Why Sharing One Facebook Login Across Reps Is Risky.

The failure modes that lock dealers out

You do not need a dramatic hack. Common lockouts on a sales floor include:

• A departing rep changes the password on the way out, or the phone that receives codes leaves with them.
• An unrecognized-login challenge fires after a weekend of posting from a new device, and nobody can complete it. Pair this plan with Unrecognized Login Alerts: What Dealers Should Do First.
• The recovery email is a personal Gmail that the original internet director no longer monitors.
• Two-factor is on, but backup codes were never printed, and the authenticator app lived on a phone that was wiped.

An account recovery plan exists to make each of those events boring instead of existential.

What to Document in Your Account Recovery Plan

Write this as a one- or two-page internal document stored where the GM and the internet director can both reach it. Do not store passwords in the document. Store how to recover, not the secrets themselves.

Identity and ownership map

For every Facebook identity the store uses to post or message, record:

• Account type (personal profile used for Marketplace, Page, or Business portfolio, as your store actually uses them).
• Display name and the email currently attached.
• Who is the business owner of that identity (title, not just a first name).
• Who is the technical custodian (the person allowed to complete a reset).
• Which vehicles or queues that identity is allowed to post.

If you cannot fill that table today, that is the first recovery risk. An identity with no named owner is an identity you cannot reclaim on purpose.

Recovery contacts and backup methods

For each identity, list the recovery channels that currently work, and the person who controls each channel:

• Primary email inbox (who has the mailbox password and where it is stored).
• Secondary email, if one is configured.
• Phone number that receives codes, and whose SIM it is.
• Authenticator app location (whose device, which app).
• Printed or stored backup codes, and the sealed location.

Test each channel on a quiet weekday. A recovery path you have never used is a theory, not a plan.

Device and session inventory

Lockouts often start with a device Facebook does not recognize. Keep a short inventory:

• Named work phones and laptops allowed to use each account.
• Whether posting happens on lot Wi-Fi, a wired desk, or mobile data.
• Who is allowed to add a new device, and who must approve it first.

When a new device is required, add it during business hours with the custodian present, not from a Saturday coffee-shop session.

A Pre-Lockout Setup Checklist for Your Account Recovery Plan

Do this while everyone can still log in. The checklist is a conservative operating standard, not a claim about Meta's unpublished thresholds or exact recovery rules.

Put two-factor on a store-controlled method

Two-factor authentication should not live only on one salesperson's personal phone. Use a store-controlled authenticator or a store phone that stays on the property when staff turn over. Print backup codes and store them with other business credentials, not in a random drawer. A dedicated walkthrough lives in Two-Factor Authentication for Dealership Facebook Accounts.

Make the email a business asset

The mailbox attached to the Facebook account is the real master key. It should be a dealership-controlled address, not a personal inbox, with its own recovery options and a named owner. If that mailbox is weak, Facebook recovery is theater. Harden it using the same discipline you would use for a DMS admin login.

Name a primary and a backup custodian

Two people at the store should be able to complete a recovery: typically the internet director or used-car manager, plus a GM or office manager as backup. The backup must have physical access to the backup codes and the mailbox, not just a verbal promise that they "could figure it out."

Separate posting work from account custody

The people who post vehicles all day should not all be able to change the password, swap the recovery email, or disable two-factor. Custody is a manager function. Posting is a queue function. Mixing them is how a floor rep's compromised phone becomes a store-wide lockout.

Run a tabletop drill

Once a quarter, walk through the first-hour protocol below without actually locking anyone out. Confirm that the backup codes are still in the envelope, the mailbox still receives mail, and the backup custodian still works there. Recovery documents rot as fast as phone lists.

What to Do in the First Hour of a Lockout

When access fails, speed without a script produces worse damage: password-reset spam, duplicate recovery attempts, and reps creating brand-new profiles "just so we can post today." Follow a sequence.

1. Stop all posting from that identity. Do not keep retrying logins from five phones. Extra failures can look like account abuse.
2. Declare a single owner of the recovery attempt. One manager drives. Everyone else waits.
3. Record what you see. Exact error text, time, device, network, and whose phone was used. You will need this if you contact Meta support or your own IT.
4. Use official recovery only. Open Facebook's own help or recovery flow from a known-good browser bookmark, not from a link in Messenger or email. Phishing during a lockout is common.
5. Start with the documented recovery channel. Mailbox, then phone, then backup codes. Do not invent a new email address in the middle of the incident unless the documented plan says that is the next step.
6. Keep surviving identities stable. If other store accounts still work, do not dump the entire backlog onto them in a burst. A panic batch after a lockout is how a second account gets throttled. Human-paced posting still applies; no tool and no workaround guarantees distribution.
7. Tell the floor what is down. Reps should not promise buyers that a listing will be edited "in five minutes" if the account is dark.
8. After access returns, rotate credentials and review sessions. Change the password, review logged-in devices, confirm two-factor is still on a store-controlled method, and update the recovery document with what actually worked.

What not to do during a lockout

• Do not create a new personal profile in a manager's name "until we get the old one back." You now have two identities, two recovery problems, and duplicate-listing risk.
• Do not have every rep hit "Forgot password" from their own phone. You will burn recovery attempts and confuse the audit trail.
• Do not pay a third party who messages you offering to "restore the account." That is a classic follow-on scam.
• Do not post the same units from a second account while the first is in limbo unless a manager has decided that is necessary and has a plan to take the duplicates down.

Continuity while you wait

If recovery takes longer than a morning, decide which units still need to be reachable: aged inventory, price drops, and sold-unit takedowns. Sold cars left live on a locked account generate angry messages you cannot answer. If you have another authorized posting identity, use it only for those priority actions, at a conservative pace, with unique copy so you are not cloning listings across accounts.

How PostToMarket Automates This

A lockout is most expensive when posting knowledge, listing copy, and "what still needs to go out today" all live inside one Facebook session. PostToMarket keeps inventory, queues, and listing drafts off that single login so a Facebook recovery event does not erase the day's work. PostToMarket is independent and is not affiliated with, endorsed by, or sponsored by Meta.

Inventory that survives a Facebook outage

• Unlimited vehicles in inventory on every plan, with statuses of draft, posting, posted, sold, and failed, so the store still knows what is live, what is waiting, and what already failed.
• Bulk CSV and Excel import with import history and a row-level error log, so restocking the queue after a lockout does not mean retyping the DMS export.
• AI-generated titles and descriptions from each vehicle's specs, editable before posting, so you are not reconstructing copy from memory when access returns.

Queues that do not depend on one shared Facebook login

• Per-rep posting queues, with managers assigning vehicles to associate queues and sales reps self-queuing from shared inventory.
• Team queue view so a manager can see and release any claim if the person who held it cannot post.
• Roles (admin, manager, sales rep, sales associate) so account custody and posting work are not the same permission set.

Posting that resumes without a panic dump

• The Chrome extension posts one vehicle at a time to Marketplace, and also to the user's Facebook profile and groups, with human-like delays.
• Server-enforced daily post limits and delays keep a "we are back online, dump everything" morning from looking like a bot farm.
• Mark as sold and archive from inventory or the queue once you can post again, so units that sold during the outage are not left advertised.

The recovery plan still belongs to the dealership. The product's job is to make sure the inventory system, the queue, and the listing drafts are still there when Facebook access returns.

Lock Out the Outage, Not the Sales Floor

An account recovery plan is cheaper than a week of dark Marketplace listings, unanswered Messenger threads, and aged units that should have been in front of buyers on Monday. Write the ownership map this week, test the mailbox, print the backup codes, and split custody from posting.

PostToMarket holds the inventory and the queue while you protect the Facebook identities those listings travel through. Starter is $59 per month for a solo seller or independent lot with one login. Dealership is $299 per month for a floor team of up to 13 logins, including two managers. Both include a 10-day free trial billed through secure Stripe checkout, and you can cancel anytime.

Start your 10-day free trial before the next unrecognized-login alert turns into a silent sales-channel outage. Questions on setup go to info@posttomarket.com.