The basic login process
To log into your bank account online, go to your bank's website or open their mobile app, enter your username or account number in the login field, then enter your password. Most banks will then send a code to your phone or email as a second verification step before you can access your account. This second step—called two-factor authentication—is a security measure that confirms you are the account holder.
The exact steps vary slightly by bank. Some use a username you created yourself; others use your account number or email address. Some send a code via text message; others use an authenticator app or a security key. Check your bank's login page for the specific method they use, or call the customer service number on the back of your debit card if you are unsure.
If you have never logged in before, you will need to set up your online account first. Your bank usually sends instructions when you open the account, or you can start the setup process directly on their website by selecting "Create Account" or "Enroll" and providing your account number and Social Security number or other identifying information.
Key Takeaways
- Log in through your bank's official website or app using your username (or account number) and password, then complete a second verification step.
- Two-factor authentication—usually a code sent to your phone—is required by most banks and protects your account from unauthorized access.
- If you have never logged in, you must enroll in online banking first, which requires your account number and personal information.
- If you forget your password, use the "Forgot Password" link on the login page to reset it; you will need access to your email or phone to verify your identity.
- Never log in through a link in an email or text message; always go directly to your bank's website or app to avoid phishing scams.
Setting up online banking for the first time
When you open a bank account, you receive paperwork or an email with instructions to activate online access. Go to your bank's website and look for a link that says "Enroll," "Create Account," "Register," or "get your free guide." Click it and provide your account number, the last four digits of your Social Security number, and your date of birth. Your bank will verify this information against their records.
After verification, you will create a username and password. Your username can be anything you choose (or your bank may assign one). Your password should be at least 8 to 12 characters long and include uppercase letters, lowercase letters, numbers, and symbols—the stronger it is, the harder it is for someone else to guess. Write it down in a secure place, like a password manager, not on a sticky note near your computer.
Once you complete enrollment, you can log in immediately. Your bank will ask you to set up two-factor authentication at this point or on your first login. This usually means providing a phone number where they can send codes, or downloading an authenticator app like Google Authenticator or Microsoft Authenticator.
What to do if you forget your password
On your bank's login page, click "Forgot Password" or "Can't Log In." Your bank will ask you to verify your identity by answering security questions you set up during enrollment, or by entering a code sent to your email or phone number. After you verify, you can create a new password.
This process usually takes a few minutes. If you cannot answer your security questions or no longer have access to the email or phone number on file, call your bank's customer service line. They will verify your identity by asking for your account number, Social Security number, and other personal details, then reset your password or send you a temporary one.
Do not use the same password you used before. Hackers often try old passwords first if they have obtained one. Make your new password different from any you have used on this account in the past.
Two-factor authentication and security codes
After you enter your password, your bank sends a code to your phone via text message, email, or an authenticator app. Enter this code on the login screen within the time limit (usually 5 to 10 minutes). This step proves that you own the phone or email address linked to the account, which stops someone who has stolen your password from logging in.
If you do not receive a code, check your spam or junk folder—sometimes banks' messages end up there. If the code still does not arrive, click "Resend Code" or "Send Again" on the login screen. If you are using an authenticator app, make sure your phone's date and time are set correctly, because the app generates codes based on your device's clock.
Some banks let you choose to trust your device for 30 days, which means you will not need a code the next time you log in from that same computer or phone. Use this option only on devices you own and control—never on a shared computer or public computer at a library or internet café.
Logging in on your phone versus a computer
Most banks have both a website (for computers) and a mobile app (for phones and tablets). The login process is the same for both: username, password, and a verification code. You can use whichever is more convenient. Many people use the app for quick checks and the website for detailed tasks like transferring money or changing account settings.
If you have not downloaded your bank's app yet, go to the Apple App Store (for iPhone) or Google Play Store (for Android), search for your bank's name, and download the official app. Make sure it is the real app from your bank, not a fake one. Check the publisher name and read recent reviews before you download.
The first time you open the app, you will log in with the same username and password you use on the website. After that, many apps let you use a fingerprint, face recognition, or a PIN code instead of typing your full password each time. This is secure because the app stores only your fingerprint or face data on your phone, not your actual password.
Protecting your login information
Never share your password with anyone, including bank employees. Your bank will never ask you for your password in an email, phone call, or text message. If someone claiming to be from your bank asks for your password, hang up or delete the message and call your bank directly using the number on your debit card or statement.
Do not log in through a link in an email or text message, even if it looks official. Scammers create fake emails and texts that look like they come from your bank and direct you to a fake login page that steals your password. Always type your bank's web address directly into your browser or open the official app instead.
Use a unique password for your bank account—do not use the same password for your email, social media, or other accounts. If a hacker breaks into one of those accounts, they will try your password on your bank account next. A password manager like Bitwarden, 1Password, or LastPass can generate and store strong, unique passwords for you.
Troubleshooting common login problems
If you see an error message saying "Username or password incorrect," double-check that you typed both correctly. Passwords are case-sensitive, which means "Password" is different from "password." If you are still stuck, use the "Forgot Password" link to reset it.
If your account is locked after several failed login attempts, this is a security feature. Wait 15 to 30 minutes and try again, or call your bank's customer service line to unlock it. If you are locked out repeatedly, it may mean someone is trying to break into your account—contact your bank immediately to report suspicious activity.
If you see a message saying "This browser is not recognized" or "Unusual login location," your bank is flagging the login as potentially risky. You may need to verify your identity by answering security questions or entering a code sent to your phone. This is normal and protects your account.
If you cannot log in at all and your bank's website appears to be down, check your bank's social media pages or call their customer service line to confirm. Banks sometimes perform maintenance that temporarily takes their website offline. You can usually still access your account on the mobile app during this time.
Frequently Asked Questions
Can I log into my bank account from any computer?
Yes, you can log in from any computer or phone. However, if you log in from a new device or location, your bank may ask you to verify your identity with a security code before allowing access. This is normal and protects your account from unauthorized use.
What should I do if I think someone else logged into my account?
Call your bank immediately using the number on your debit card or statement. Do not use a phone number from an email or text message. Tell them you suspect unauthorized access. Your bank can freeze your account, review recent transactions, and help you dispute any charges you did not make.
Is it safe to save my password in my browser?
Saving your password in your browser is convenient but less secure than using a password manager. If someone gains access to your computer, they can see your saved passwords. A dedicated password manager is safer because it encrypts your passwords and requires a master password to access them.
Why does my bank require two-factor authentication?
Two-factor authentication adds a second layer of security. Even if a hacker obtains your password, they cannot log in without access to your phone or email. This protects your money from theft and is now standard at most banks.
Can I log in if I change my phone number?
If your bank sends verification codes to your phone, you will need to update your phone number in your account settings before you change carriers. Log in on a computer or your old phone, go to settings or account information, and update your phone number. Then you can switch to your new phone and continue receiving codes normally.