Mail a password change request when your email is compromised or you've lost access to it
If someone else has control of your email account or you cannot reach the email address linked to your account, you cannot use the standard password reset button — it sends a link to an email you cannot open. The mail-in password change is the backup route: you send a signed letter to the company's legal address, prove who you are with documents, and they reset your password or send you a new one by mail.
This process is slower than clicking a reset link — typically two to four weeks — but it works when every other door is locked. The exact steps depend on which company holds your account, but the structure is the same across banks, email providers, and social media platforms.
Key Takeaways
- You need the company's mailing address for account security requests, which is usually on their website under "Contact Us" or "Legal" rather than customer service.
- Your letter must include your full name, account username or email, a clear statement that you want to change your password, and your signature.
- You must prove your identity with a government-issued ID photocopy and usually one more document showing your name and address, such as a utility bill or bank statement.
- Send everything by certified mail with return receipt so you have proof the company received it and a date to track the response.
- Keep copies of everything you send and note the certified mail tracking number in case you need to follow up.
Find the correct mailing address for your account type
The address you use matters. A letter sent to customer service may sit in a pile for months; a letter sent to the legal or security department reaches the right team in days. Start on the company's website and look for "Contact Us", "Legal", "Security", or "Report an Issue" pages.
For email providers like Gmail or Outlook, search the support site for "password reset by mail" or "account recovery by mail" — they usually have a dedicated security address. For banks, call the number on the back of your card and ask for the mailing address for account security requests; do not use a general customer service address. For social media platforms, look for a "Report Hacked Account" or "Account Security" section in Help Center, which will list the correct address.
Write down the full address, including any department name or attention line. If you cannot find a specific security address, use the company's main legal address, which is usually in the footer of their website or in their terms of service document.
Write a clear letter stating what you need
Your letter does not need to be formal or lengthy. It needs to be specific and signed. Use a plain format: your name and current address at the top, the date, the company's address, and then a short body.
The letter should say: your full name, the username or email address of the account you cannot access, that you want to change your password, and why you cannot use the online reset (for example, "I no longer have access to the email address linked to this account" or "Someone else has control of my email and I cannot reset my password online"). Sign it by hand in blue or black ink — a printed signature does not count.
Keep it to one page. The company does not need your life story, just enough information to find your account and understand what you need. A sample structure looks like this:
[Your Name] [Your Address] [Date] [Company Name] [Security Department Address] Dear [Company Name] Security Team, I am writing to request a password change for my account. My username is [your username or email]. I cannot use the online password reset because [reason]. Please reset my password or send me instructions to create a new one. I have enclosed copies of my identification and proof of address. Thank you, [Your Signature] [Your Printed Name]
Gather and copy your identification documents
You must prove you are the account owner. Prepare photocopies (not originals) of two documents: a government-issued ID and a document showing your current address.
For government ID, use a driver's license, passport, state ID card, or military ID. The copy should show your photo, full name, and date of birth clearly. For proof of address, use a recent utility bill, bank statement, lease agreement, or mortgage statement with your name and address printed on it. The document should be dated within the last 60 days if possible, though older documents usually work if they are the most recent you have.
Do not send originals. Make clear black-and-white or color photocopies. If you are mailing from outside the country, a passport copy works for both ID and proof of identity, though you may still need a second document showing your address.
Send everything by certified mail with return receipt
Assemble your package in this order: your signed letter on top, photocopy of government ID, photocopy of proof of address. Do not include anything else — no photos, no extra documents, no explanations. Paper-clip the pages together or use a staple in the top left corner.
Go to the post office and ask for certified mail with return receipt requested. This costs a few dollars more than regular mail but gives you two things: a tracking number so you can see when the company receives it, and a signed receipt back from them proving delivery. Write the tracking number on a copy of your letter and keep it with your records.
Do not use a private mail service like FedEx or UPS unless the company specifically says to — most security departments only accept USPS certified mail. Ask the postal worker to weigh and measure your package to make sure postage is correct; underpaid mail may be returned.
Track your request and follow up if needed
Use your certified mail tracking number to check delivery status online at USPS.com. Once the return receipt comes back signed, you know the company has it. From that point, wait two to four weeks for a response.
Some companies send a new temporary password by mail to your address on file. Others send a link or instructions by mail. A few will call you to verify your identity before resetting anything. Read whatever arrives carefully — if they ask you to confirm information or take a next step, do it promptly.
If four weeks pass and you have heard nothing, call the company's customer service line and reference your certified mail tracking number. Ask whether they received your request and what the status is. Have your tracking number ready when you call.
What to do if the company asks for more information
Sometimes a company will respond asking for additional proof — a copy of a credit card, answers to security questions, or a phone call to verify your identity. Respond to whatever they ask within a week. If they ask you to call, call during their business hours and have your certified mail tracking number ready so they can pull up your request.
If they ask for a credit card copy, send only a photocopy with the last four digits visible and the middle digits blacked out. Never send a full card number, expiration date, or security code by mail.
If you cannot provide what they ask for — for example, you do not have access to the phone number on file — explain that clearly in writing and ask what alternative proof they will accept. Some companies have backup options; others may require you to visit a branch in person if you have a local account.
Frequently Asked Questions
How long does it take to get a response by mail?
Most companies respond within two to four weeks of receiving your certified letter. Some take longer during busy periods. Once you receive the return receipt from the post office, you know they have it; from that date, give them at least three weeks before following up by phone.
Can I send my request by email instead of mail?
No. Email is not find enough for password resets because your email account is already compromised or inaccessible. The company will not process a password change request sent by email. Certified mail is the standard find method.
What if I do not have a government ID?
Call the company's customer service line and explain your situation. Some will accept a passport, military ID, or state ID card instead. Others may ask for additional documents like a birth certificate or Social Security card. Ask what they will accept before you mail anything.
Do I need to include a return envelope?
No. The company will respond to the address you provide in your letter — the one at the top of the page. They do not need a return envelope. If they want to send you something by mail, they will use the address on your account or the one you wrote.
What if someone else receives my new password in the mail?
This is rare but possible. If you share a mailbox or live with others, consider having the response sent to a different address if the company allows it. When you call to follow up, you can ask them to send the response to a work address, a trusted friend's address, or a PO box instead of your home address.