Password and Account Recovery

Reset a forgotten password, set up two-factor authentication, and recover access to your accounts safely.

Forgot your password? You can usually reset it

Most websites and apps have a “Forgot password” option. Here’s how to reset safely and add extra protection with two-factor authentication.

How to reset a forgotten password

  1. On the login screen, look for “Forgot password?” or “Reset password”.
  2. Enter the email address or phone number you used for the account.
  3. Check your email or phone for a reset link or code.
  4. Use the link or code to create a new password.
  5. Choose a strong password: mix letters, numbers, and symbols. Avoid obvious words like “password123.”

Tip: The reset link often expires in 1–2 hours. If it expires, request a new one.

If you can’t access your email

Many accounts use your email for recovery. If you lost access to that email:

  • Try the email provider’s own recovery (e.g. Gmail’s “Forgot password”).
  • Use any backup email or phone number you added to the account.
  • For banks and important accounts, call customer service — they can verify your identity and help.

Two-factor authentication (2FA)

Two-factor authentication adds a second step when you sign in — usually a code sent to your phone. It makes your account much harder for someone else to access.

How it works:

  • You enter your password, then the site asks for a code.
  • The code comes by text message or from an authenticator app on your phone.
  • You enter the code to finish signing in.

Tip: Turn on 2FA for email, banking, and any account with sensitive information.

Setting up 2FA

  1. Log in to the account and go to Settings or Security.
  2. Look for “Two-factor authentication”, “2FA”, or “Two-step verification”.
  3. Choose text message (easiest) or an authenticator app.
  4. Follow the steps to verify your phone number or link the app.

Never share these

  • Your password
  • One-time codes sent by text or email (used for 2FA)
  • Real companies and banks will never ask for these by phone, email, or text.

If someone asks for a code, it is likely a scam. Hang up or delete the message.

Using a password manager

A password manager stores your passwords securely so you don’t have to remember them all. You only need to remember one master password.

  • Examples: 1Password, LastPass, Bitwarden, or the one built into your browser or phone.
  • They can also generate strong passwords for you.
  • Make sure your master password is strong and that you don’t forget it.

Quick tips for safer passwords

  • Use a different password for each important account.
  • Longer is better — aim for at least 12 characters.
  • Add a backup email or phone to your accounts for recovery.
  • Turn on 2FA for email, banking, and medical accounts.