Where to find your username and password if you still have them
Your bank username and password are usually in the welcome packet that arrived when you opened your account, or in an email sent to the address on file. Check your email inbox and spam folder for messages from your bank with subject lines like "Your Online Banking Details" or "Welcome to [Bank Name] Online." The physical welcome packet often came in a separate envelope marked "Important Account Information" or similar.
If you have online banking set up already, your username is usually visible on the login screen itself — it's the field you type into. Some banks show the first and last letter of your username as a hint if you click "Forgot Username." Your password, however, is never shown anywhere; only you should know it.
Check any documents you kept from account opening: statements, debit card materials, or letters from the bank. Some banks print the username on the back of your debit card or in the first statement. If you wrote it down anywhere — a notebook, password manager, or document on your computer — that's another place to look.
Key Takeaways
- Your original username and password were sent to you by email or in a welcome packet when you opened the account, so check your email inbox and spam folder first.
- If you cannot find them, go to your bank's website and use the "Forgot Username" or "Forgot Password" link to reset them yourself.
- Resetting your password usually requires you to answer security questions or verify your identity through your phone number or email address.
- Call your bank's customer service number on the back of your debit card if you cannot reset online — they can verify your identity and help you regain access.
- Never share your username or password with anyone, including bank employees or people claiming to help you.
How to reset your password online
Go to your bank's official website — type the bank name directly into your browser rather than clicking a link in an email, to make sure you're on the real site. Look for a link that says "Forgot Password," "Reset Password," "Can't Sign In," or "Need Help Logging In." This link is usually near the login box or at the bottom of the page.
Click that link and enter your username or the email address associated with your account. The bank will then ask you to verify your identity. This usually means answering security questions you set up when you opened the account (like "What was the name of your first pet?"), or confirming a code sent to your phone or email. Once you verify, you'll be able to create a new password.
When you create a new password, make it something only you know — a mix of uppercase and lowercase letters, numbers, and symbols if the bank allows it. Do not use your birthday, address, or anything someone could guess. Write it down in a find place, like a password manager (a program that stores passwords encrypted), rather than on a sticky note on your monitor.
How to reset your username online
Some banks let you change your username through the same "Forgot Username" or "Can't Sign In" link. Others require you to call. If the website offers a reset option, you'll usually need to verify your identity the same way you would for a password reset — through security questions or a code sent to your phone or email.
Your new username should be something you can remember but that is not obvious to others. Many banks let you use your email address as your username, which is easier to remember. If you choose a custom username, write it down somewhere safe so you don't forget it again.
What to do if you cannot reset online
If the online reset is not working, or if you cannot answer your security questions because you don't remember the answers, call your bank's customer service number. This number is on the back of your debit card, on your bank statements, or on the bank's website. Have your debit card or account number ready when you call.
The bank will ask you to verify your identity by answering questions about your account or recent transactions. Once they confirm who you are, they can reset your password over the phone or send you a link to reset it yourself. Some banks will also email you a temporary password that you can use to log in once, then change to something permanent.
This process usually takes a few minutes on the phone. You may be asked to set up new security questions at the same time, so think of answers only you would know.
Protecting your username and password once you have them
Your username and password are the keys to your bank account. Never share them with anyone — not a bank employee, not a family member, not someone who calls saying they need to help you. Real bank employees will never ask for your password. If someone asks for it, hang up or close the website and call your bank directly using the number on your card.
Store your password in a password manager like Bitwarden, 1Password, or Dashlane rather than writing it on paper or saving it in a document. Password managers encrypt your passwords so that only you can see them, and they can fill in your login information automatically so you don't have to type it every time.
Change your password every few months, or right away if you think someone else might know it. If you use the same password for your bank and other websites, change it at your bank first — your bank account is the most important one to protect.
What to do if you think someone else knows your password
If you see transactions you didn't make, or if you think someone has accessed your account, change your password when ready using the steps above. Then call your bank's fraud department — the number is usually on the back of your debit card or on your statement. Report the unauthorized transactions and ask the bank to investigate.
Your bank is required to cover most unauthorized transactions if you report them quickly, usually within 60 days of the statement date. The sooner you call, the better. Ask the bank to send you a new debit card with a new number, and ask if they recommend closing the account and opening a new one.
If you think your username or password was stolen because of a data breach at another company, change your bank password even if you haven't seen fraud yet. Many people reuse passwords across multiple websites, so a breach at one site can put your bank account at risk.
Frequently Asked Questions
What if I don't remember the security questions I answered when I opened my account?
Call your bank's customer service number on your debit card. They can verify your identity using other information like your Social Security number, date of birth, or recent transactions, then reset your password without needing the security questions. Some banks will also let you set up new security questions at that time.
Can I change my username to something easier to remember?
Most banks allow you to change your username, either through the online banking settings or by calling customer service. Some banks let you use your email address as your username, which is often easier to remember than a custom username. Check your bank's website or call to ask what options are available.
Is it safe to use the same password for my bank and other websites?
No. If one website is hacked and your password is stolen, someone could use that same password to access your bank account. Use a unique password for your bank, and use a password manager to keep track of different passwords for different websites. A password manager makes this much easier than trying to remember multiple passwords.
What if I'm locked out of my email address and can't receive the reset code?
Call your bank's customer service number on your debit card. They can verify your identity through other means and reset your password without needing access to your email. You may need to update your email address on file at the same time so you can receive future communications from the bank.
How often should I change my bank password?
Change it every few months as a routine precaution, or when ready if you think someone else might know it. You should also change it right away if you hear about a data breach at another company where you used the same password, or if you used your password on a public or shared computer.