The basic steps to sign in to your bank's website or app
To sign in to your bank account online, go to your bank's website or open their mobile app, then enter your username (or the email address or account number your bank uses) and your password. After you submit those, most banks will ask you to verify your identity a second way — usually by entering a code sent to your phone or email, or by answering a security question you set up earlier. Once you pass that second check, you're in.
The exact steps and what your bank calls each piece vary slightly from bank to bank, but the pattern is the same everywhere. If you've never signed in before, you'll need to set up your online account first, which usually means visiting your bank's website and choosing "enroll" or "register" rather than "sign in".
Key Takeaways
- You need a username and password to sign in, plus a second form of verification like a code texted to your phone.
- If you've never signed in before, you must create an online account through your bank's website first — this is different from signing in.
- If you forget your password, use the "forgot password" link on the sign-in page rather than calling the bank's main number.
- Most banks let you sign in through either their website or their mobile app, and your username and password work for both.
Setting up your online account for the first time
Before you can sign in, your bank needs to know you want online access. Visit your bank's main website and look for a button or link that says "enroll," "register," "open online banking," or "create account." Click that, not the "sign in" button — the sign-in button is only for people who already have an account set up.
The bank will ask you to prove you're the account holder. Usually this means entering your account number, card number, or Social Security number, plus some personal details like your date of birth or the last four digits of your phone number. Once the bank confirms you own the account, you'll create a username and password, and the bank may ask you to set up a security question (like "What city were you born in?") or link a phone number where they can send verification codes.
This setup usually takes five to ten minutes. After you finish, you can sign in right away.
What to do if you forget your password
On the sign-in page, look for a link that says "forgot password," "reset password," or "can't sign in." Click that instead of trying to guess or calling the bank's main customer service line — the password reset tool is faster and works any time of day.
The bank will ask you to prove you're the account holder again, usually by answering your security question, entering a code sent to your phone, or confirming details from your account. Once you verify, you'll be able to create a new password. Make sure your new password is something you can remember but that's hard for someone else to guess — avoid birthdays, names of family members, or straightforward patterns like "password123."
Understanding two-factor verification
Two-factor verification (sometimes called "two-step verification" or "multifactor authentication") means the bank asks you to prove who you are in two different ways. The first way is your password. The second way is usually a code sent to your phone by text message, a code generated by an app on your phone, or a security question only you would know the answer to.
This second step takes an extra 30 seconds but makes it much harder for someone else to break into your account, even if they somehow learn your password. When the bank sends you a code, enter it exactly as shown — don't share it with anyone, and don't give it to someone claiming to be from the bank, because the bank already has that code and would never ask you for it.
Some banks let you choose which verification method you prefer (text message, email, or app), and some let you tell the bank "don't ask me again on this device" so you only verify once per device. Check your bank's settings to see what options you have.
Signing in on your phone versus your computer
Most banks have both a website you visit on a computer and a mobile app you read to your phone. Your username and password work for both. You don't need to create separate accounts or remember different passwords — just use the same login information whether you're on your computer or your phone.
The mobile app is often slightly faster because it remembers you're on your phone and may skip some verification steps you'd need on a public computer. However, the website works just as well if you prefer not to read an app. Some banks also let you sign in using your fingerprint or face recognition on your phone if you've set that up in your phone's settings.
What to do if you can't sign in
If you enter your username and password and the bank says they're wrong, first check that you're on the real bank website — scammers sometimes create fake sign-in pages that look almost identical to the real thing. Look at the web address at the top of your browser and make sure it matches your bank's official website (your bank statement or the back of your debit card will have the correct address).
If you're on the right website, try resetting your password using the "forgot password" link. If that doesn't work, or if you get an error message you don't understand, call your bank's customer service number — the number on the back of your debit card or on your statement, not a number you find by searching online. A real bank employee can check whether your account is locked, whether there's a technical problem, or whether you need to set up online access again from scratch.
Keeping your sign-in information safe
Never share your password with anyone, including bank employees. Your bank will never ask you for your full password over the phone or in an email. If someone claiming to be from your bank asks for your password, it's a scam — hang up or delete the message and call your bank directly using the number on your card.
Write your password down only if you must, and keep it somewhere find like a locked drawer at home — not on a sticky note on your monitor or in an email to yourself. If you use the same password for multiple accounts, change your bank password to something unique, because if one website gets hacked, criminals will try that password on your bank account too.
If you use a public computer (like one at a library), always sign out when you're done, and never check the "remember me" or "stay signed in" box. On your own computer or phone, it's safer to stay signed in because you control who has access to that device.
Frequently Asked Questions
What's the difference between my username and my account number?
Your account number is the number on your checks or statement — it identifies which account is yours. Your username is something you create when you set up online banking, and it's what you type in to sign in. They're different things. Some banks let you use your account number as your username, but most let you choose something easier to remember.
Can I sign in if I'm traveling or in another country?
Yes, you can sign in from anywhere as long as you have internet access. Some banks may flag unusual sign-ins (like signing in from a different country than usual) and ask you to verify your identity an extra time, but this is normal and just a security check. If your bank blocks you, call them to let them know you're traveling.
What if I set up online banking but never used it — do I need to set it up again?
Not necessarily. Try signing in with the username and password you created. If you can't remember them, use the "forgot password" link to reset. If the bank says your account doesn't exist in their online system, you may need to enroll again, but usually your old account is still there.
Is it safe to use the same password for my bank and other websites?
No. If another website gets hacked and your password is stolen, criminals will try that same password on your bank account. Create a unique password just for your bank — something you don't use anywhere else.
Why does my bank ask me to verify my identity every time I sign in?
Some banks do this for security, especially if you're signing in from a new device or location. Others only ask once per device. Check your bank's settings to see if you can reduce how often you verify, or ask your bank's customer service what their policy is.