Where your password might be stored on your device
If you have logged into an account before on your computer or phone, your device may have saved the password. Most browsers and operating systems store passwords in a built-in manager, and you can view them without knowing the original password.
On Windows, open Settings, go to Accounts, then select "Sign-in options." Scroll down to "Password" and you will see an option to change your password — but more useful, you can click "I forgot my password" to see the recovery options you set up when you created the account. On a Mac, open System Settings, go to General, then Passwords, and search for the account name. Your Mac will ask you to authenticate with your fingerprint or password before showing the saved password.
In your web browser, passwords are usually stored in the browser's password manager. In Chrome, click your profile icon in the top right, select "Passwords," and search for the site. In Firefox, go to Settings, then Privacy & Security, scroll to Logins and Passwords, and click "Saved Logins." In Safari on Mac, go to Preferences, select Passwords, and search for the account. On iPhone or iPad, go to Settings, select Passwords, and search for the site name.
Key Takeaways
- Your browser or device may have already saved your password — check your password manager before trying to reset.
- Most websites have a "Forgot Password" link on the login page that sends a reset link to your email or phone number.
- You will need access to the email address or phone number you used when you created the account to reset your password.
- If you cannot access your recovery email or phone, contact the website's support team with proof of identity — this process takes longer but is still possible.
- Write down new passwords in a password manager, not on paper or in a note on your phone, so you do not lose them again.
Using the "Forgot Password" link on the website
Nearly every website has a "Forgot Password" or "Forgot Your Password?" link on the login page. Click it, and the site will ask you to enter your username or email address. The website will then send a password reset link to the email address or phone number you registered with.
Open that email or text message and click the reset link. The link usually works for a set amount of time — often 24 hours — so do this soon after you request it. You will be taken to a page where you can create a new password. Make sure your new password is different from old ones you have used, at least 12 characters long, and includes uppercase letters, numbers, and symbols if the site requires them.
After you reset your password, log in with your new one and update it in your password manager so you do not forget it again. If you do not have a password manager yet, consider using one built into your browser or a standalone app like Bitwarden or 1Password — these store passwords securely and fill them in automatically when you visit a website.
What to do if you cannot access your recovery email or phone
If the recovery email address no longer exists or you no longer have access to the phone number you registered with, you cannot use the standard password reset. Instead, look for a "Can't access your account?" or "Need more help?" link on the login page, usually below the "Forgot Password" option.
Click that link and the website will ask you to verify your identity in other ways. You may be asked to answer security questions you set up when you created the account, provide the last four digits of a credit card on file, or upload a photo of your ID. Different websites use different methods — some ask for all three, others ask for one.
This process usually takes several days because a human support agent reviews your request. Be honest and complete in your answers. If the website cannot verify you, they will tell you why and may ask for additional information. Keep copies of anything you submit in case you need to follow up.
Recovering access to your email account itself
If you have forgotten the password to your email account — Gmail, Outlook, Yahoo, or another provider — you cannot receive the password reset link from other websites. You must recover your email account first.
Go to the email provider's login page and click "Forgot password?" or "Can't sign in?" Gmail will ask you to enter the last password you remember, then send a recovery link to a backup email or phone number. Outlook and Yahoo follow a similar process. If you do not have a backup email or phone, you will need to verify your identity by answering security questions or uploading ID, which takes longer.
Once you regain access to your email, you can then reset passwords for any other account that uses that email address for recovery. This is why protecting your email account is the most important step — if someone gains access to your email, they can reset passwords for almost everything else you own.
Using account recovery codes or backup methods
Some websites, especially banks and email providers, give you backup codes or recovery options when you first create your account. These are usually a list of single-use codes printed on paper or saved in a file. If you saved these codes, you can use them to regain access without needing your recovery email or phone.
Look for these codes in your files, email, or anywhere you may have saved them. If you find them, go to the website's login page and look for an option like "Use a recovery code" or "Use a backup method." Enter one of the codes and you will be able to reset your password. Each code works only once, so if you use one, you will have fewer backups left.
If you cannot find your recovery codes and the website asks for them, contact the website's support team. Explain that you have lost your codes and ask whether they can issue new ones or help you regain access another way. This usually requires identity verification.
Preventing password loss in the future
The easiest way to avoid this situation is to use a password manager. These are apps or browser extensions that remember your passwords for you, so you only need to remember one strong master password. Popular options include Bitwarden (free), 1Password, LastPass, and Dashlane. Your browser's built-in password manager — Chrome Password Manager, Firefox Password Manager, or iCloud Keychain on Apple devices — also works well and costs nothing.
When you create a new account, let your password manager generate a random password and save it automatically. When you need to log in, the password manager fills it in for you. This way you never have to type or remember the password, and you will not lose it.
Also keep your recovery email and phone number current. If you change your email address or phone number, update it in every account that matters — especially your email provider, bank, and social media. This ensures that if you forget a password, the reset link will reach you.
What to do if someone else may have your password
If you think someone else knows your password — because you shared it, used it on a website that was hacked, or suspect unauthorized access — reset it when ready, even if you remember it. Do not wait.
Go to the website, use "Forgot Password" or your account settings to change your password to something completely new. Make it different from any password you have used before. If this is an important account like email or banking, also check your account activity for any sign of unauthorized access — unusual login locations, changed settings, or unfamiliar activity.
If you see signs of unauthorized access, contact the website's support team right away. They can help you find your account and may be able to reverse any damage. For banking or financial accounts, also contact your bank by phone using the number on your card or statement, not a number from an email.
Frequently Asked Questions
How long does a password reset link stay valid?
Most websites make reset links valid for 24 hours, though some use shorter windows like 1 hour or longer ones like 72 hours. Check the email with the reset link — it usually says how long the link will work. If the link expires, go back to the login page and request a new one.
Can I see my password if I am already logged in?
On most websites, no — passwords are hidden for security. But you can change your password from your account settings. Look for "Security," "Password," or "Account Settings" in your profile menu. You will usually need to enter your current password before you can create a new one.
What if the password reset email never arrives?
Check your spam or junk folder first — reset emails sometimes get filtered there by mistake. If it is not there, wait a few minutes and request a new reset link. If you still do not receive it, make sure you entered the correct email address on the login page. If the problem continues, contact the website's support team.
Is it safe to use the same password for multiple accounts?
No. If one website is hacked and your password is stolen, someone can use that same password to access all your other accounts. Use a different password for each account, especially for email, banking, and social media. A password manager makes this straightforward because it remembers all of them for you.
Can I recover a password if I never set up a recovery email or phone?
It is much harder, but usually still possible. You will need to verify your identity through security questions, ID upload, or other methods the website offers. This process takes longer — sometimes a week or more — because a support agent has to review your request manually. This is why setting up recovery options when you create an account matters.