You cannot recover a password you have truly forgotten, but you can reset it
If you have forgotten your email password, the email provider cannot tell you what it is — they do not store passwords in a form that can be read back to you. What they can do is let you prove you own the account, then let you create a new password. This process is called a password reset, and it is the standard way back in.
The reset process works differently depending on which email service you use and what recovery information you set up when you created the account. Gmail, Outlook, Yahoo, and other major providers all have reset tools, but they ask for different proof that the account belongs to you.
Key Takeaways
- Password recovery and password reset are different things — you cannot recover a forgotten password, but you can reset it to something new through your email provider's recovery process.
- The reset process requires you to prove you own the account, usually by answering security questions, entering a recovery email address, or confirming a code sent to your phone.
- If you set up two-factor authentication or a recovery email when you created the account, the reset will be faster and more reliable.
- If you cannot prove ownership through any recovery method, you may need to create a new email account, because the provider cannot verify the account is yours.
How Gmail password reset works
Go to the Gmail sign-in page at accounts.google.com/signin. Enter your email address, then click "Forgot password?" on the password screen. Google will ask you to enter the last password you remember using. If you cannot remember any password, click "Try another way."
Google will then ask you to verify ownership through one of these methods: a code sent to a recovery phone number, a code sent to a recovery email address, or answers to security questions you set up. If you have a recovery phone number on file, that is usually the fastest route. If you do not have a recovery phone or email set up, you may be asked security questions like "What was the name of your first pet?" — but only if you set those up when you created the account.
Once you verify ownership, you will be taken to a screen where you can create a new password. Make it at least 12 characters long and use a mix of uppercase letters, lowercase letters, numbers, and symbols.
How Outlook password reset works
Go to account.microsoft.com/security and click "Change your password." You will be asked to sign in — if you cannot sign in, click "Can't access your account?" instead.
Microsoft will ask you to enter your email address, then show you a list of ways to prove you own it: a code sent to a phone number, a code sent to an alternate email address, or answers to security questions. Choose the method that will work for you. Once you verify, you can create a new password.
If you do not have a recovery phone or email on file and do not remember your security questions, Microsoft has a longer verification process. You may be asked to provide a government ID or answer questions about your account history. This can take several days.
How Yahoo password reset works
Go to login.yahoo.com and click "Forgot password?" on the sign-in screen. Enter your email address. Yahoo will ask you to verify ownership by entering a code sent to a recovery phone number or recovery email address.
If you do not have a recovery phone or email on file, Yahoo will ask you to answer security questions or provide other information about the account. If you cannot answer those questions, you may be asked to wait 24 hours before trying again, or to provide additional proof of ownership.
What to do if you cannot verify ownership through any method
If you cannot access a recovery phone, do not remember a recovery email address, and cannot answer security questions, the email provider may not be able to verify that the account belongs to you. This is a security feature — it prevents someone else from taking over your account by guessing recovery information.
In this situation, you have two options. First, wait a few days and try again — sometimes recovery options become available after a waiting period. Second, contact the email provider's support team directly. Gmail, Outlook, and Yahoo all have support pages where you can describe your situation and ask for help. Be prepared to answer questions about when you created the account, what devices you used it on, and what you remember about the account.
If the provider cannot verify ownership after that, you will need to create a new email account. This is frustrating, but it is the trade-off for having a password system that cannot be broken by someone who knows a little about you.
How to avoid this problem in the future
Set up a recovery phone number and a recovery email address as soon as you create an email account. You can do this in the account settings or security settings of your email provider. A recovery phone number is the most reliable option because it is harder to lose access to than an email address.
If your email provider offers security questions, answer them with information that is true but not straightforward to guess from social media. "What was the name of your first pet?" is a common question, but if you post photos of your pet online, the answer is not private. Choose a question where the answer is something only you would know.
Use a password manager to store your email password. A password manager like Bitwarden, 1Password, or Dashlane keeps your passwords encrypted and fills them in automatically. If you use a password manager, you will not need to remember your email password, and you will be less likely to forget it.
The difference between password recovery and account recovery
Password recovery means resetting your password through your email provider's standard process — the one described above. Account recovery means proving you own the account when you have lost access to all the recovery methods. Account recovery takes longer and may require you to provide government ID or other proof.
If you have set up recovery information, you will go through password recovery, which usually takes minutes. If you have not set up recovery information, you may go through account recovery, which can take days or weeks. This is why setting up recovery information when you create the account matters.
Frequently Asked Questions
Can the email provider tell me what my password is?
No. Email providers store passwords in an encrypted form that cannot be read back. They can only let you reset your password to something new. If someone tells you they can recover your old password, they are either lying or trying to trick you into giving them access to your account.
What if I do not have a recovery phone number or email address?
You can still reset your password if you remember the answers to security questions you set up when you created the account. If you did not set up security questions, contact your email provider's support team and be ready to answer questions about your account history and provide proof of identity.
How long does password reset usually take?
If you have a recovery phone number on file, reset usually takes a few minutes — you receive a code by text, enter it, and create a new password. If you need to use security questions or contact support, it can take hours to days. Account recovery through support can take a week or more.
Should I write my password down somewhere?
Writing your password on paper and storing it in a safe place is safer than reusing the same password across multiple accounts or forgetting it entirely. A better option is to use a password manager, which encrypts your passwords and fills them in automatically without you having to remember them.
What if someone else is trying to reset my password?
If you receive a code or reset link you did not request, do not enter it. Go directly to your email provider's website and change your password when ready. Then check your account recovery settings and remove any phone numbers or email addresses you do not recognize. Turn on two-factor authentication if your provider offers it.