The basics of signing in
Signing in means entering your username or email address and password into a website or app to access your account. Most online services—banks, email providers, government portals, social media—require you to sign in before you can see your personal information or take action on your account.
The sign-in process is usually the same across most services: you land on a page with two boxes (one for your username or email, one for your password), you type your credentials, and you click a button labeled "Sign In," "Log In," or "Submit." After that, the service checks whether your password is correct. If it is, you enter your account. If it is not, you get an error message and can try again.
Some services add extra security steps after you enter your password—they might text you a code, ask you to confirm your identity another way, or show you a list of devices you have signed in from before. These steps are normal and make your account harder to break into.
Key Takeaways
- Sign in by entering your username or email and password on the service's login page, then clicking the sign-in button.
- If you forget your password, use the "Forgot Password" link on the login page to reset it—the service will send you a recovery email or text.
- Two-factor authentication (a code sent to your phone or email after you enter your password) adds security but takes an extra 30 seconds.
- If you cannot sign in after trying your password multiple times, check whether your caps lock is on, whether you are on the correct website, and whether your account exists.
- Never share your password with anyone, and use a different password for each important account so one breach does not expose all of them.
Where to find the sign-in page
Most websites put a "Sign In" or "Log In" link in the top right corner of the page, or sometimes in the top left. On mobile apps, you usually see a sign-in screen when you first open the app if you are not already signed in.
If you cannot find the sign-in link on a website, look for a button or link that says "Account," "My Account," "Login," "Sign In," or sometimes just a person icon. Some services hide the sign-in link behind a menu—tap the three horizontal lines (called a hamburger menu) in the corner and look for it there.
Type the web address directly into your browser if you are still stuck. For example, if you are trying to sign into your email, go to gmail.com or outlook.com rather than searching for it. This also protects you from fake sign-in pages that criminals sometimes create to steal passwords.
What to do if you forget your password
On the sign-in page, look for a link that says "Forgot Password," "Forgot Your Password," "Can't Sign In," or "Need Help Signing In." Click that link.
The service will ask you to enter your username or email address. After you do, it will send you a recovery email or text message with a link or code. Click the link or enter the code on the next page, and you will be able to set a new password.
Check your spam or junk folder if you do not see the recovery email within a few minutes. Some email providers filter password-reset messages by mistake. If you still cannot find it after 10 minutes, try requesting another recovery email—sometimes the first one does not arrive.
If the service asks security questions (like "What is your mother's maiden name?") before sending the recovery email, answer them as accurately as you can. These questions are meant to prove you own the account.
Two-factor authentication and extra security steps
Two-factor authentication (often called 2FA) is a second check that happens after you enter your password correctly. The service sends a code to your phone (by text or through an app) or to your email, and you have to enter that code before you can sign in. This means someone who steals your password still cannot get into your account without also having access to your phone or email.
If your service offers two-factor authentication, you usually turn it on in your account settings under "Security" or "Privacy." You will choose whether to receive codes by text message, through an authenticator app (like Google Authenticator or Microsoft Authenticator), or through your email. Text message is the easiest for most people.
When you sign in from a new device or location, the service might ask you to confirm your identity in other ways—it might show you a list of devices you have signed in from before and ask you to pick one, or it might send you a confirmation email asking you to click a link. These are normal security checks and usually take less than a minute.
Common reasons you cannot sign in
The most common reason sign-in fails is a typo in your password. Check whether your caps lock key is on—passwords are case-sensitive, meaning uppercase and lowercase letters are different. If caps lock is on, your password will not work even if you typed it correctly otherwise.
Make sure you are on the correct website. Criminals sometimes create fake sign-in pages that look almost identical to the real thing. If you are unsure, type the web address directly into your browser rather than clicking a link from an email or search result.
If you have tried your password several times and it keeps failing, your account might be locked for security reasons. Look for a message on the sign-in page that says your account is locked or temporarily disabled. If you see that, follow the instructions to unlock it—usually by clicking a link sent to your email or waiting 24 hours.
If you are certain your password is correct and your account is not locked, the account might not exist under that username or email address. Try signing in with a different email address if you have more than one, or use the "Forgot Password" link to see whether the service recognizes your email at all.
Staying safe when you sign in
Never enter your password on a website unless you see a padlock icon in the address bar (on the left side of the URL). That padlock means the connection is encrypted and your password will not be intercepted by someone on the same network.
Do not use the same password for multiple accounts. If one service gets hacked and your password is stolen, a criminal can use that password to break into your email, bank account, and other important accounts. Use a different password for each service, especially for email and banking.
If you use a password manager (a tool that stores and fills in your passwords for you), it makes it easier to use different passwords everywhere without having to remember them all. Password managers like Bitwarden, 1Password, or Dashlane are free or low-cost and much safer than writing passwords down or reusing the same one.
Never share your password with anyone, including customer service representatives. Real customer service staff will never ask for your password. If someone claims to be from a company and asks for your password, that is a scam.
Signing out when you are done
When you finish using an account, especially on a shared or public computer, sign out. Look for a "Sign Out," "Log Out," or "Logout" button, usually in a menu in the top right corner or under your account name.
On your own personal device, signing out is less critical, but it is still a good habit. On a shared computer (like one at a library or internet cafe), always sign out before you leave—otherwise the next person to use that computer can access your account.
If you sign in on a new device and the service asks whether you want to stay signed in, choose "No" if it is a shared device and "Yes" if it is your personal device. Staying signed in on a shared device is a security risk.
Frequently Asked Questions
What is the difference between signing in and signing up?
Signing up means creating a new account for the first time—you choose a username or email and a password, and the service stores that information. Signing in means using an existing account by entering your username or email and password. You only sign up once per service; you sign in every time you want to use your account.
Can I sign in with my phone number instead of my email?
Some services let you sign in with a phone number, but most use email as the primary sign-in method. Check the sign-in page to see what options the service offers. If you want to use your phone number, you may need to add it to your account settings first.
What should I do if I think someone else signed into my account?
Change your password immediately using the "Forgot Password" link. Then go to your account settings and look for a section called "Active Sessions," "Devices," or "Sign-In Activity." You can usually see where and when your account was accessed and sign out any devices you do not recognize. If your email was also compromised, change that password too.
Is it safe to let my browser save my password?
Letting your browser save passwords is convenient but only safe on a device only you use. On a shared computer, do not let the browser save passwords. If you use your own computer, browser password storage is reasonably safe, though a password manager is more secure because it encrypts your passwords.
Why does the service keep asking me to sign in again?
Services sign you out automatically after a period of inactivity (usually 15 minutes to a few hours) for security reasons. This is especially common on banking and government websites. If it happens frequently, check whether you have cookies enabled in your browser—some privacy settings prevent the service from remembering you are signed in.