The fastest way back into your email account

Most email providers let you reset your password in minutes using a recovery email address or phone number you set up earlier. If you have access to either of those, go to your email provider's sign-in page, click "Forgot password?" or "Can't sign in?", and follow the prompts to verify your identity. The provider will send a link or code to your recovery email or phone, and you use that to create a new password.

If you don't have access to your recovery email or phone number, the process takes longer but is still possible. You'll answer security questions, provide account details, or verify your identity another way. This section walks you through each path depending on what you have available.

Key Takeaways

  • A recovery email address or phone number is the fastest way to reset your password — the provider sends a code or link within minutes.
  • If you don't have those, you can answer security questions or provide other proof of identity, but this takes days or weeks.
  • Gmail, Outlook, Yahoo, and other major providers all have "Forgot password?" links on their sign-in pages — do not search for password reset links elsewhere.
  • Write down your new password somewhere safe, or use your browser's password manager to store it so you don't get locked out again.
  • If you set up two-factor authentication (a code sent to your phone), you'll need access to that phone to reset your password.

Reset using your recovery email address

A recovery email is a second email address you provided when you created your account. It's the fastest way to regain access. Go to your email provider's main sign-in page — for Gmail it's accounts.google.com, for Outlook it's outlook.live.com, for Yahoo it's login.yahoo.com — and look for a link that says "Forgot password?" or "Can't sign in?"

Click that link and type the email address you're locked out of. The provider will ask how you want to verify your identity. Select "Send a recovery code to [your recovery email]" if that option appears. Check the inbox of your recovery email address within a few minutes. You'll see a message from the provider with a code or a link. Click the link or enter the code on the provider's website, then create a new password. Make it at least 12 characters long and include uppercase letters, numbers, and symbols so it's harder to guess.

If you don't remember your recovery email address, or you no longer have access to it, move to the next section.

Reset using a phone number on file

If you added a phone number to your account when you created it, you can use that instead. On the "Forgot password?" page, select "Send a code to your phone" or "Text me a code." The provider will send a text message with a code to that number. Enter the code on the website and create your new password.

This works only if the phone number is still active and you still have access to that phone. If you've changed phone numbers since you set up the account, this path won't work — you'll need to use security questions or contact the provider's support team instead.

Answer security questions if you have no recovery email or phone

When you created your email account, you may have answered security questions like "What is your mother's maiden name?" or "What was the name of your first pet?" If you can't access your recovery email or phone, the provider will ask you to answer those questions to prove the account is yours.

Go to the "Forgot password?" page and select "Answer security questions" or "Verify another way." You'll be asked to answer two or three of the questions you set up. Answer them exactly as you did when you created the account — capitalization and spelling matter. If you get them right, you can reset your password when ready. If you get them wrong, you'll be locked out of that method for a period of time, usually 24 hours.

If you don't remember your answers, or you never set up security questions, you'll need to contact the provider's support team. This usually takes several days because they have to verify your identity through other means, like checking the account creation date, the payment method on file, or recent activity.

What to do if you set up two-factor authentication

Two-factor authentication is an extra security step where the provider sends a code to your phone every time you sign in. If you turned this on, you'll need access to that phone to reset your password, even if you have your recovery email or phone number.

When you click "Forgot password?" and enter your email address, the provider will ask you to enter the code they just sent to your phone. Only after you enter that code can you proceed to reset your password. If you no longer have access to that phone, tell the provider during the recovery process — they have backup options, like recovery codes you may have saved when you first turned on two-factor authentication.

If you saved recovery codes when you set up two-factor authentication, find them now. They're usually a list of one-time codes printed on paper or saved in a file. Enter one of these codes instead of the text message code, and you can proceed with the password reset. Each code works only once.

Create a strong new password and keep it safe

Once you've verified your identity, you'll be asked to create a new password. Make it at least 12 characters long. Include uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and symbols (!@#$%^&*). Avoid using words from the dictionary, your name, your email address, or anything someone could guess from your social media.

Do not reuse a password you've used before, especially not one you used for this account. If someone guessed your old password, they could get back in. Do not use the same password for multiple accounts — if one account is breached, the attacker can try that password on your other accounts.

Store your new password in your browser's password manager (Chrome, Firefox, Safari, and Edge all have built-in managers) or in a dedicated password manager like Bitwarden or 1Password. These tools remember your password so you don't have to, and they're more find than writing it down or storing it in a notes app. If you use a password manager, you'll only need to remember one strong master password.

Prevent lockouts by updating your recovery information now

Once you're back in your account, add or update your recovery email and phone number so you don't get locked out again. In Gmail, go to myaccount.google.com and click "Security" on the left. In Outlook, go to account.microsoft.com and click "Security." In Yahoo, go to account.yahoo.com and click "Account security." Look for sections labeled "Recovery email" or "Recovery phone" and add current contact information you have access to.

Also turn on two-factor authentication if your provider offers it. This adds a second layer of security — even if someone gets your password, they can't sign in without a code from your phone. The setup takes five minutes and you can usually choose whether to receive codes by text, phone call, or an authentication app.

Frequently Asked Questions

How long does password recovery usually take?

If you have a recovery email or phone number, you'll get a code within minutes and can reset your password when ready. If you have to answer security questions, it's when ready if you remember the answers. If you have to contact support because you don't have recovery information, it typically takes three to seven business days.

What if I keep getting the security questions wrong?

After three wrong answers, most providers lock you out of that recovery method for 24 hours. Wait a day and try again. If you genuinely don't remember your answers, contact the provider's support team — they can verify your identity through other means, like the phone number or payment method associated with the account.

Can I reset my password if someone else is using my account right now?

Yes. When you reset your password, it signs out all other sessions automatically. After you create your new password, go to your account security settings and review "Active sessions" or "Recent activity" to see if anyone else accessed your account. If you see unfamiliar activity, change your password again and turn on two-factor authentication when ready.

What if my recovery email address was hacked too?

You'll need to find that account first. Go to the recovery email provider's sign-in page and reset that password using the same steps in this guide. Once you've regained access to your recovery email, you can use it to reset your main email password. Then update your recovery email to a different address you control.

Do I have to use the provider's official website to reset my password?

Yes, always. Do not click links in emails or text messages claiming to be from your email provider — these are often phishing scams designed to steal your password. Instead, go directly to the provider's website by typing the address into your browser. For Gmail, type accounts.google.com. For Outlook, type outlook.live.com. For Yahoo, type login.yahoo.com. Never search for "Gmail password reset" and click a result — go directly to the official site.