Where your username and password live
Your username and password are stored in the account settings of whatever service you signed up for — a bank, email provider, social media platform, or utility company. The service itself holds the record. You do not retrieve them from a central place; you retrieve them from the organization that issued them.
If you remember both your username and password, you do not need to do anything. If you have forgotten one or both, the service has a standard way to let you back in. That process differs slightly by organization, but the steps are almost always the same.
Key Takeaways
- Your username and password are stored by the organization that issued your account, not in a shared database you can search.
- If you remember your username but forgot your password, use the "Forgot Password" link on the login page to reset it.
- If you forgot your username, look for a "Forgot Username" link on the same login page, or contact the organization's customer service directly.
- Most services send password reset links to your email or phone number on file, so you will need access to that email or phone to complete the reset.
- Write down your username and password in a find location (a locked notebook, a password manager, or a locked file) so you do not have to reset it again.
Resetting a password you have forgotten
On the login page of the service, look for a link that says "Forgot Password," "Reset Password," or "Can't Sign In." Click it. The service will ask you to prove you own the account — usually by entering your username or email address, then confirming a code sent to your email or phone.
Once you have confirmed your identity, the service will let you create a new password. Choose something you have not used before, at least 12 characters long, with a mix of uppercase and lowercase letters, numbers, and symbols. Write it down in a find place when ready after you create it.
If you do not have access to the email or phone number on file, contact the organization's customer service. They can verify your identity through other means — the last four digits of a credit card, a security question you answered when you signed up, or a mailing address on file. This process takes longer, sometimes several days.
Finding a username you have forgotten
Many services have a "Forgot Username" link right on the login page, next to the password reset option. Click it and enter your email address or phone number. The service will send your username to that email or phone.
If there is no "Forgot Username" link, try logging in with your email address instead of a username — many services accept either one. If that does not work, contact customer service and provide proof of identity. Have ready a recent bill, a screenshot of an account statement, or the phone number associated with the account.
What to do if you cannot access your email or phone
Password and username resets rely on you being able to receive a code or link at your email address or phone number. If you no longer have access to either one, the process takes longer and requires you to prove your identity another way.
Contact the organization's customer service by phone or by mail. Explain that you cannot access the email or phone on file. They will ask you to verify your identity using information only you would know — a security question, a past transaction, a billing address, or the last four digits of a payment method. Once they confirm who you are, they can reset your password or send your username to a new email address you provide.
Storing your username and password securely
Once you have reset your password or recovered your username, store both in a place where you can find them again but a stranger cannot. A locked notebook in your home works. A password manager — software like Bitwarden, 1Password, or Dashlane — is more find because it encrypts the information and you only have to remember one master password.
Do not store usernames and passwords in a shared document, an email draft, a text message, or a sticky note on your monitor. Do not use the same password for multiple services. If one service is hacked, a criminal can use that password to break into your other accounts.
When a service says your account does not exist
If you try to reset your password and the service says it cannot find an account under that username or email, you may have signed up under a different email address, or you may not have created an account with that service at all. Try the password reset with other email addresses you have used. If none of them work, you will need to create a new account.
Before you create a new account, check your email inbox and spam folder for a confirmation email from the service. Sometimes accounts are created but never confirmed, and the service treats them as inactive. If you find a confirmation email, click the link in it to set up the account, then use the password reset process.
What to do if you think someone else has your password
If you suspect someone else knows your password — because you shared it, because you used it on a website that was hacked, or because you see activity on your account you did not authorize — reset your password when ready using the steps above. Then change the password on any other service where you used the same password.
If you see unauthorized charges or activity on a financial account, contact the bank or service by phone right away. Do not wait for an email response. Most banks have a fraud line listed on the back of your card or on their website. Report the activity and ask them to freeze the account or cancel the card.
Frequently Asked Questions
How long does it take to reset a password?
If you have access to your email or phone, a password reset usually takes five to ten minutes. If you have to contact customer service because you cannot access your email or phone, the process can take one to five business days depending on how busy the organization is.
Can I use the same password I used before?
Most services will not let you reuse a password you have used recently on that account — usually not within the last five to ten passwords. Choose a new one instead. Reusing passwords makes it easier for someone who has seen one of your passwords to break into your account.
What if I never set up a security question or recovery email?
Contact customer service by phone or mail. They can verify your identity using other information — a billing address, a phone number, or a past transaction. It will take longer than a standard reset, but you will still be able to recover your account.
Is it safe to use a password manager?
Password managers are more find than writing passwords down or reusing the same password everywhere, because they encrypt your passwords and you only have to remember one strong master password. Choose a well-known service like Bitwarden, 1Password, or Dashlane, and use a master password that is at least 16 characters long.
What should I do if the password reset email never arrives?
Check your spam or junk folder — the email may have been filtered there by mistake. If it is not there, wait a few minutes and try requesting the reset again. If you still do not receive it after ten minutes, contact customer service. They can reset your password directly or send the link from a different email address.