---
title: "I gave a password or a code · urlert"
description: "Someone may have it now. These steps lock them out, most urgent first."
url: https://www.urlert.com/recover/password
mcp: https://www.urlert.com/mcp
---

[URLert home](https://www.urlert.com/index.md)

[About (opens in a new tab)](https://www.urlert.com/about.md) [Sign in](https://www.urlert.com/login.md)

**0 of 8 done** Steps done: 0% Next: Was it a code from your bank?

[All “I already did it” guides](https://www.urlert.com/recover.md)

# I gave a password or a code

Someone may have it now. These steps lock them out, most urgent first.

1. ### Was it a code from your bank?

   Call your bank now, on the number on your card. A code can approve a payment.

   Done: false
2. ### Change that password now.

   Go to the real website or app yourself; don't use a link from the message. Gave a code? Change the password of the account it was for. Use the same password anywhere else? Change it there too, your email first.

   Done: false
3. ### Work account or work device?

   Tell IT now: they can lock it and check what was reached.

   Done: false
4. ### Already locked out?

   Use the site's own “Forgot password” or account recovery page, typed in yourself, and tell them the account was taken over.

   Done: false
5. ### Look for changes you didn't make.

   In the account's settings: a new recovery email or phone number, new devices, email forwarding, payments or payees. Undo them, so they can't use them to get back in. Was it your email? Warn your contacts not to act on odd requests sent from it.

   Done: false
6. ### Sign out of all other devices.

   In the same settings, usually under Security or Devices. This signs out other phones and computers.

   Done: false
7. ### Turn on two-step sign-in.

   A code or an approval on your phone each time someone signs in. It's in the same settings, usually under Security or Sign-in.

   Done: false
8. ### Report it.

   Report it to your police or your country's fraud reporting service, even if you lost nothing. Reports help stop the same scam reaching others. Add your screenshot of the message, if you took one.

   [In the US: ReportFraud.​ftc.​gov (the FTC's website, opens in a new tab)](https://reportfraud.ftc.gov/)

   Done: false

#### Your progress

0 of 8 done

Steps done: 0%

Next1\. Was it a code from your bank?

#### Who to contact

- **Your bank** The number on your card
- **Your IT team**
- **Your police or fraud reporting service** In the US: ReportFraud.​ftc.​gov

Never a number from the message.

#### Keep as proof

Before you delete anything: a screenshot of the message, the number or name it came from, and any receipts.

## From now on

- ### Watch for the next message or call.

  Scammers often come back with a more convincing one, sometimes pretending to be your bank or the police. Check it here before you act.

[URLert home](https://www.urlert.com/index.md)

[About(opens in a new tab)](https://www.urlert.com/about.md) · [How we decide](https://www.urlert.com/how.md) · [Privacy](https://www.urlert.com/privacy.md) · [Terms](https://www.urlert.com/terms.md) · [For developers](https://www.urlert.com/developers.md) · [AI assistants](https://www.urlert.com/assistants.md)