When you can request a password change through email
Most websites and services do not let you change your password by sending an email to their support team. Instead, they direct you to use the "Forgot Password" link on their login page, which sends you a reset link by email. That link takes you to a form where you create a new password yourself.
Some organizations — particularly banks, government agencies, and employers — may have a different process. They might require you to call a phone number or visit an office in person to change your password for security reasons. A few older systems or specialized accounts do accept password change requests by email, but this is uncommon because it creates security risks.
Before you email anyone about a password change, check the website or app for a self-service password reset option. That is almost always faster and safer than contacting support.
Key Takeaways
- The "Forgot Password" link on a login page is the standard way to reset your password; it sends you a secure reset link by email.
- Never send your current password or new password in an email to anyone, even if they claim to work for the organization.
- Banks, government portals, and employers often require phone or in-person verification before allowing a password change for security reasons.
- If you cannot find a password reset option on the website, contact support through the official phone number or contact form listed on their site.
How to use the standard password reset process
Go to the login page of the website or app where you need to change your password. Look for a link that says "Forgot Password," "Forgot Your Password," "Reset Password," or "Can't Sign In." Click that link.
You will be asked to enter your username, email address, or account number — whichever the organization uses to identify you. Enter the information and click the button to continue. The system will send an email to the address on file with your account.
Open that email. It will contain a link that looks like a long string of letters and numbers. Click the link. This takes you to a page where you can type a new password. Create a password that is at least 12 characters long and includes uppercase letters, lowercase letters, numbers, and symbols if the system allows them. Type it twice to confirm, then click the button to save.
You should see a message saying your password has been changed. Go back to the login page and sign in with your new password to confirm it works.
What to do if you do not receive the reset email
Check your spam or junk folder. Password reset emails sometimes get filtered there by mistake. If you find it, mark it as "not spam" so future emails from that organization go to your inbox.
If the email is not in your spam folder, wait 10 to 15 minutes. Some systems take time to send the email. If you still do not see it after 20 minutes, go back to the password reset page and request another email.
If you have tried multiple times and still have not received an email, the email address on file with your account may be wrong or inactive. Contact the organization's support team using the phone number or contact form on their official website. Tell them you cannot receive password reset emails and ask them to update your email address or help you reset your password another way.
When to contact support by email or phone instead
If the website has no "Forgot Password" link, or if you have tried it and it is not working, you will need to contact support. Do not email your password or ask them to change it for you in the email. Instead, describe the problem: "I cannot access the password reset page" or "I am not receiving the reset emails."
For sensitive accounts — such as banking, government benefits, or work email — call the organization instead of emailing. Phone support can verify your identity more securely and may be able to reset your password while you are on the call. Find the official phone number on the organization's website, not from a search result or email.
If you are locked out of your email account itself, you will need to use a recovery email address or phone number that you set up beforehand. Go to the login page and look for "Can't Access Your Account" or a similar link. You may be asked to verify your identity by answering security questions or entering a code sent to a phone number on file.
Security steps to take after you change your password
After you have successfully changed your password, sign out of all other sessions if the website offers that option. This forces anyone else who may have been using your account to sign in again with the new password.
If you changed your password because you think someone else accessed your account, check your account activity or login history if the website provides it. Look for sign-ins from places or devices you do not recognize. If you see suspicious activity, contact support and let them know your account may have been compromised.
Consider changing your password again in a few weeks if you were concerned about unauthorized access. Some people do this as an extra precaution to make sure any copies of the old password are no longer useful.
Why you should never email your password to anyone
Email is not encrypted by default, which means your password can be read by anyone who intercepts the message. Even if you trust the person you are emailing, their email account could be hacked, and your password would be visible to the hacker.
Legitimate organizations will never ask you to email your password to them. If someone claiming to work for a company asks you to send your password by email, it is a scam. Real support teams use secure systems to reset passwords without ever seeing what your new password is.
If you receive an email asking you to confirm your password or send it to a support address, do not reply. Instead, go directly to the organization's official website and contact them through the phone number or contact form listed there. Tell them you received a suspicious email.
Frequently Asked Questions
How long does it take to receive a password reset email?
Most password reset emails arrive within 1 to 5 minutes. If you have not received one after 15 minutes, check your spam folder, then request another email. If it still does not arrive after a second request, contact support by phone or through the website's contact form.
Can I change my password without using email?
Yes. Banks and government agencies often let you change your password by calling their phone number and verifying your identity with security questions or a code. Some organizations also let you change your password in person at an office or branch. Check the organization's website for options beyond the email reset link.
What if I forgot my password and the recovery email is old?
Contact support through the phone number on the organization's official website. Tell them your recovery email is no longer active and ask them to update it or help you reset your password using a different verification method, such as a security question or phone number.
Is it safe to use the same password for multiple accounts?
No. If one account is hacked, the hacker can use that password to access all your other accounts. Create a different password for each important account, especially for email, banking, and work. A password manager can help you store and organize different passwords securely.
What should I do if I think my password was stolen?
Change your password immediately using the "Forgot Password" link. Then check your account activity for any sign-ins you do not recognize. If you see suspicious activity, contact support and tell them your account may have been compromised. Consider changing your password again in a few weeks as an extra precaution.