Getting into your bank account online
To log into your bank account, go to your bank's official website or open their mobile app, enter your username or account number and password, and follow any additional security steps they require. Most banks ask for a one-time code sent to your phone or email after you enter your password — this is called two-factor authentication, and it's a security layer that makes your account harder to break into.
The exact steps depend on which bank you use, but the basic flow is the same across most institutions. If you've never logged in before, you'll need to set up your online access first, usually through a link on your bank's homepage labeled "Enroll" or "Register." If you've forgotten your password, every bank has a "Forgot Password" link that will walk you through resetting it.
Key Takeaways
- Log in through your bank's official website or app by entering your username and password, then complete any security verification your bank requests.
- Two-factor authentication — a code sent to your phone or email — is a standard security step that protects your account from unauthorized access.
- If you don't have online access set up yet, look for an "Enroll" or "Register" button on your bank's homepage to create your login credentials.
- Always verify you're on your actual bank's website before entering your password, because phishing sites designed to look like banks are common.
- If you can't log in after multiple attempts, contact your bank's customer service directly using the phone number on your debit card or bank statement.
Setting up online access for the first time
If you have a bank account but have never logged in online, you'll need to enroll first. Go to your bank's main website and look for a button that says "Enroll," "Register," "Open Online Banking," or "get your free guide." Click it and you'll be asked to verify who you are — usually by providing your account number, Social Security number, and date of birth.
After verification, you'll create a username and password. Your username can often be your email address, but some banks let you choose any username you want. Your password should be something only you know — avoid birthdays, names, or simple sequences. Once you've created these credentials, you'll be able to log in immediately.
Some banks also let you set up a PIN or security questions as backup verification methods. These are optional but useful if you ever lose access to your phone or email.
Two-factor authentication and security codes
After you enter your password, your bank will usually send a code to your phone via text message or to your email. This code is temporary and valid for only a few minutes. Enter it into the login screen to complete your access. This second step is called two-factor authentication, and it means that even if someone steals your password, they still can't get into your account without access to your phone or email.
Some banks let you choose how you receive the code — text, email, or a call. If you don't receive the code within a minute or two, check your spam folder or request a new one. If your phone number or email has changed, update it in your bank's settings before you need to log in, so you don't get locked out.
A few banks offer an authenticator app instead of text codes. These apps generate a new code every 30 seconds and work even if you don't have cell service. If your bank offers this option, it's more secure than text codes because text messages can be intercepted.
Staying safe when you log in
Before you enter your password, make sure you're actually on your bank's real website. Phishing sites — fake websites designed to look like your bank — are common. Check the web address in your browser's address bar: it should start with "https://" (the "s" means it's secure) and should match your bank's official domain. If you're unsure, don't type the address yourself. Instead, call the number on the back of your debit card and ask for the correct website.
Never log in from a public Wi-Fi network without a VPN, because these networks are not encrypted and someone nearby could see your password. If you must use public Wi-Fi, use your phone's mobile hotspot instead, or wait until you're on a secure network.
Your bank will never ask you to log in via a link in an email or text message. If you receive an email claiming to be from your bank and asking you to "verify your account" or "confirm your password," it's a phishing attempt. Delete it and log in directly through the bank's website instead.
What to do if you can't log in
If you enter your password and it doesn't work, first make sure Caps Lock is off — passwords are case-sensitive. If you've tried multiple times and still can't log in, click "Forgot Password" and follow the reset process. You'll be asked to verify your identity using your account number, Social Security number, or answers to security questions you set up earlier.
If you don't remember setting up security questions, or if the reset process isn't working, contact your bank's customer service. The phone number is on the back of your debit card, on your bank statements, or on the bank's website. Have your account number and a form of ID ready when you call. Customer service can unlock your account or help you reset your password over the phone.
If you've been locked out after too many failed login attempts, your account is temporarily frozen for security. Wait 15 to 30 minutes and try again, or call customer service to unlock it immediately.
Logging in on your phone versus a computer
Most banks have both a website you can access from any browser and a mobile app you can download. The mobile app is often faster and may offer features the website doesn't, like mobile check deposit or cardless ATM withdrawal. Both are equally secure as long as you download the app directly from the official app store — Apple App Store for iPhones, Google Play for Android phones.
If you log in from multiple devices, your bank may ask you to verify the new device the first time. This is normal security practice. You might be asked to enter a code sent to your phone or email, or to answer a security question. After verification, you usually won't have to verify that device again.
If you see login activity from a device you don't recognize, change your password immediately and contact your bank. Most banks have a fraud department that can review suspicious activity and reverse unauthorized transactions.
Keeping your login information secure
Write your password down only if you store it in a locked place at home — not in your phone, not in an email, and not on a sticky note on your monitor. A password manager — software that stores and encrypts your passwords — is a safer option if you have trouble remembering complex passwords. Popular options include Bitwarden, 1Password, and LastPass.
Change your password every few months, especially if you've used the same one for years. If you think someone else knows your password, change it immediately. If you've shared your login with a family member or caregiver, consider setting up a separate user profile for them instead, so they can access only certain features.
Log out when you're finished, especially on a shared computer. Most banks will log you out automatically after 15 to 30 minutes of inactivity, but don't rely on that — click the logout button yourself.
Frequently Asked Questions
What if I forgot my username?
Most banks let you log in with either your username or your email address, so try your email first. If that doesn't work, click "Forgot Username" on the login page and follow the recovery steps. You'll usually be asked to verify your identity with your account number and Social Security number. If the automated process doesn't work, call your bank's customer service line.
Can I log in without two-factor authentication?
Most banks require two-factor authentication for security and don't let you skip it. Some banks offer the option to "trust this device" after you log in once, which means you won't need a code the next time you log in from that same device. This is less secure but more convenient if you're the only person using that computer or phone.
What happens if I enter the wrong password too many times?
Your account will be temporarily locked after three to five failed attempts, depending on your bank. Wait 15 to 30 minutes and try again, or call customer service to unlock it right away. This is a security feature to prevent someone from guessing your password.
Is it safe to save my password in my browser?
Saving your password in your browser is convenient but less secure, especially on a shared computer. If someone gains access to your computer, they can see your saved passwords. Use this feature only on a personal device that only you use, and never on a public or shared computer.
What should I do if I see unfamiliar transactions after logging in?
Contact your bank immediately using the number on your debit card or bank statement. Do not use a phone number from an email or text message claiming to be from your bank. Report the unauthorized transactions and your bank will investigate and likely reverse them. You may also need to request a new debit card.