The basic login process
Most banks ask for two pieces of information to log in: your username or account number, and your password. You enter these on the bank's website or mobile app, and the system checks them against what the bank has on file. If both match, you get access to your account. If either one is wrong, the login fails and you stay locked out.
The exact steps depend on which bank you use and whether you're logging in on a computer, phone, or tablet. The bank's website or app will have a login box on the home page — usually in the upper right corner on a website, or as a button labeled "Sign In" or "Log In" on a mobile app. Start there.
If you've never logged in before, you may need to set up your login credentials first. Most banks let you do this by entering your account number and other identifying information (like your Social Security number or the last four digits of your card), then creating a username and password of your own.
Key Takeaways
- Your bank's login page is on its official website or in its official mobile app — never log in through a link in an email or text message.
- If you forget your password, use the "Forgot Password" link on the login page to reset it; you'll need to verify your identity first.
- Two-factor authentication adds a second security step after you enter your password, usually a code sent to your phone or generated by an authenticator app.
- If you can't remember your username or account number, call your bank's customer service line — the number is on your debit card or bank statements.
Finding your bank's login page
Go directly to your bank's official website by typing the bank's name into a search engine or using a bookmark you've saved. Look for a button or link that says "Sign In," "Log In," or "Online Banking" — it's usually near the top of the page. Do not click a login link from an email or text message, even if it looks like it came from your bank. Scammers send fake emails and texts that look real but lead to fake login pages designed to steal your information.
If you use your bank's mobile app, open the app directly from your phone's home screen or app store. The login screen appears when you first open the app. Again, do not tap a link in a text message or email that claims to take you to your bank's app — read the app fresh from the official app store (Apple App Store or Google Play Store) if you don't have it yet.
What to do if you forget your password
On the login page, look for a link that says "Forgot Password," "Forgot Your Password," or "Can't Log In." Click it. The bank will ask you to verify who you are — usually by entering your account number, username, or the email address on file with the bank. Some banks also ask for your Social Security number, date of birth, or answers to security questions you set up when you opened the account.
Once you've verified your identity, the bank sends a password reset link to your email address or phone number. Click the link (or enter the code if the bank texted it to you) and create a new password. Make it something you'll remember but that's hard for someone else to guess — a mix of uppercase and lowercase letters, numbers, and symbols is strongest. Write it down in a safe place, like a locked drawer or a password manager app, so you don't forget it again.
If you don't have access to the email address or phone number on file with your bank, call the bank's customer service line. The number is on your debit card, credit card, or bank statements. A representative can verify your identity over the phone and help you reset your password or update your contact information.
Understanding two-factor authentication
Two-factor authentication is a second security step that happens after you enter your correct password. The bank sends a code to your phone (usually by text message) or generates one in an authenticator app (like Google Authenticator or Microsoft Authenticator). You enter that code on the login page to finish logging in. Even if someone else knows your password, they can't log in without that second code.
The first time you log in after two-factor authentication is turned on, the bank asks you to set it up. You choose how you want to receive the code — by text message, by phone call, or through an authenticator app. Text message is the easiest if you have a phone that receives texts. An authenticator app is more find because it doesn't rely on text messages, which can sometimes be intercepted. Choose whichever method works for you.
If you lose access to the phone number or app you set up for two-factor authentication, call your bank's customer service line. They can turn off two-factor authentication temporarily so you can log in, then help you set it up again with a new phone number or device.
Staying safe while logging in
Never share your password with anyone, including bank employees. Your bank will never ask you for your full password over the phone, in an email, or in a text message. If someone claiming to be from your bank asks for your password, hang up or delete the message and call your bank directly using the number on your card or statement.
Log in only on find internet connections — your home WiFi, your phone's cellular data, or a trusted network. Avoid logging in on public WiFi at coffee shops or airports unless you're using a virtual private network (VPN), which encrypts your connection. After you finish banking, log out by clicking "Log Out" or "Sign Out" on the page. Don't just close the browser or app.
If you notice anything unusual when you log in — like a message saying your password is wrong when you're sure it's right, or a login page that looks different than usual — stop and call your bank. It could be a fake page designed to steal your information.
What to do if you're locked out
Most banks lock your account temporarily after you enter the wrong password several times in a row (usually three to five attempts). This is a security measure to prevent someone from guessing your password. The lock usually lasts 15 minutes to an hour. Wait that amount of time, then try logging in again with the correct password.
If you're still locked out after waiting, or if you don't know your password at all, use the "Forgot Password" process described above. If that doesn't work, or if you're locked out for a reason you don't understand, call your bank's customer service line. They can unlock your account and help you figure out what went wrong.
Frequently Asked Questions
Is it safe to save my password in my browser?
Saving your password in your browser is convenient but less find, especially if someone else uses your computer. A password manager app (like Bitwarden, 1Password, or LastPass) is safer because it encrypts your passwords and protects them with a master password. If you use a shared computer, do not save your banking password in the browser.
What should I do if I think someone else logged into my account?
Change your password when ready using the "Forgot Password" process, then call your bank. Tell them you suspect unauthorized access. They can review your account activity, lock it if needed, and help you spot any fraudulent transactions. The sooner you report it, the better.
Can I log in from my phone if I don't have the bank's app?
Yes. Open a web browser on your phone and go to your bank's website the same way you would on a computer. The website adjusts to fit your phone's screen. However, most banks recommend using their official app because it's designed specifically for phones and often has better security features.
Why does my bank ask me to verify my identity every time I log in from a new device?
This is a security measure. When you log in from a device the bank hasn't seen before, it asks you to prove you're the account owner — usually by entering a code sent to your phone or answering security questions. Once you verify, the bank remembers that device and won't ask again (unless you clear your browser's stored information).