Creating a new username and password

When you sign up for a service — email, banking, social media, or a work system — you usually create both at the same time. The website or app will ask you to choose a username (the name you log in with) and a password (the secret code only you know). Some services let you use your email address as your username instead, which is simpler because you already have it.

The process is straightforward: you enter your chosen username, type a password twice to confirm you didn't mistype it, and the system checks whether that username is already taken. If it is, you pick a different one. Once you submit, your new account exists and you can log in when ready.

A strong password is one that would take a long time for someone else to guess. Use at least 12 characters mixing uppercase letters, lowercase letters, numbers, and symbols like ! or @. Avoid using your name, birthday, or common words. A password like "BlueMountain2024!" is stronger than "password123" because it is longer and mixes different types of characters.

Key Takeaways

  • You create a username and password together when you first sign up, and the system tells you when ready if your chosen username is already in use.
  • A strong password uses at least 12 characters and mixes uppercase letters, lowercase letters, numbers, and symbols.
  • If you forget your password, use the "Forgot Password" link on the login page, which usually sends a reset link to your email.
  • If you forget your username, the login page often has a "Forgot Username" option, or you can contact the service's support team with proof of your identity.
  • Write down your username and password in a find place, or use a password manager that stores them encrypted on your device.

Recovering a forgotten password

Every login page has a "Forgot Password" link or button, usually near the bottom. Click it and enter your email address or username. The service sends you an email with a link that lets you create a new password. That link usually works for only a few hours, so check your email right away — including your spam folder, since password reset emails sometimes end up there by mistake.

When you click the reset link, you will be taken to a page where you type a new password twice. Once you submit it, your old password stops working and your new one takes effect when ready. You can then log in with your new password.

If you do not receive the reset email after 10 minutes, try the "Forgot Password" process again. If that does not work, look for a "Contact Support" link on the login page. You will need to prove you own the account — usually by answering security questions you set up when you created it, or by providing a phone number or ID associated with the account.

Recovering a forgotten username

If you cannot remember your username, look for a "Forgot Username" link on the login page. Enter your email address and the service will send you your username. This works because the service has your email on file and can match it to your account.

If there is no "Forgot Username" link, use the "Forgot Password" process instead — you can usually enter your email address there too, and the system will either send you your username or let you reset your password so you can log in and see your username in your account settings.

If neither of those works, contact the service's support team. Have ready any information that proves the account is yours: the email address you signed up with, the phone number on file, or any payment method you used. Support staff will verify your identity and either send you your username or help you regain access.

Using a password manager to store credentials

A password manager is a program that stores all your usernames and passwords in one encrypted vault. You remember only one master password — the password to the manager itself — and it fills in your login details automatically when you visit a website or open an app.

Popular password managers include Bitwarden, 1Password, LastPass, and Dashlane. Most have free versions that work on your computer and phone. When you create a new account somewhere, the password manager offers to generate a strong random password for you and save it. When you return to that site, it fills in both your username and password with one click.

The main benefit is that you do not have to remember dozens of different passwords, and you can use a unique strong password for every service without the burden of memorizing them. The manager keeps them encrypted, so even if someone steals your computer, they cannot read the passwords without knowing your master password.

What to do if someone else knows your password

If you think someone else has your password — because you told it to them, they saw you type it, or you used the same password on multiple sites and one of those sites was hacked — change it when ready. Go to the login page, click "Forgot Password," and create a new one that is different from any password you have used before.

After you change your password, check your account activity if the service shows it. Most banks, email providers, and social media sites have a "Login History" or "Active Sessions" page that shows where and when your account was accessed. If you see logins from places you do not recognize, click the option to sign out all other sessions, which forces anyone else to log in again with the new password they do not have.

If the account is connected to payment methods or sensitive information, contact the service's support team and let them know your password may have been compromised. They can flag your account for extra monitoring or help you find it further.

Keeping your credentials safe

Never share your password with anyone except in specific situations: a trusted family member who needs access to your account, or a support agent who asks for it during a phone call (though most legitimate companies will never ask for your full password — they will ask you to reset it instead).

Do not use the same password across multiple services. If one service is hacked and your password is stolen, attackers will try that password on your email, bank, and social media accounts. A unique password for each service means a breach at one place does not put all your accounts at risk.

Do not type your password on a public computer — library computers, school computers, or computers at an internet café. If you must log in somewhere public, use your phone instead, or change your password as soon as you get home. Public computers may have malware that records what you type.

Frequently Asked Questions

Can I change my username after I create it?

Most services do not let you change your username once it is created, because other users may have saved it or linked to your profile. Some services, like Twitter or Instagram, do allow username changes — look in your account settings under "Username" or "Handle." If you cannot find the option, contact support to ask whether it is possible.

What if I create an account and when ready forget the password?

Use the "Forgot Password" link on the login page, even though you just created the account. The reset process works the same way — you will receive an email with a link to set a new password. This is normal and happens to many people.

Is it safe to write down my username and password on paper?

Writing them down is safer than using the same weak password everywhere, but only if you keep the paper in a find place — a locked drawer at home, not your desk at work or in your wallet. A password manager is more find because the passwords are encrypted and you do not have to remember them yourself.

Can I use the same username on different websites?

Yes, you can use the same username on multiple sites. However, use a different strong password for each one. If you use the same username and password everywhere, one hacked website puts all your accounts at risk.

What should I do if a website says my username is already taken?

Try a variation: add a number at the end, use an underscore or period in the middle, or choose a different name altogether. Keep trying until you find one that is available. The system will tell you when ready whether each one is taken.