PanicStation.org
UK USA
uk Technology & digital loss

What to do if…
your password works on one device but is rejected on another for the same account

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy UK guide

Short answer

Stop repeated attempts. Use the device that still works to secure the account first, then retry the failing device with clean manual input and the correct sign-in route.

Do not do these things

  • Don’t keep trying password variations quickly; repeated failures can trigger a temporary lockout or extra checks.
  • Don’t change settings on several devices at once, because it becomes harder to tell what helped.
  • Don’t install “password recovery” tools or remote-help apps from pop-ups, search ads, or strangers.
  • Don’t click sign-in links from emails or texts while you are stressed; go to the service directly.
  • Don’t share screenshots of one-time codes, recovery codes, password screens, or security checks.

What to do now

  1. Pause the failing sign-in

    • Stop trying for a few minutes if you have already had several failures.
    • If the site or app says “try again later”, wait and avoid restarting the timer with more attempts.

  2. Use the device that still works to secure the account

    • Change the password to a new, unique password.
    • Sign out of other sessions or devices if the account offers this option, usually under “Security”, “Devices”, or “Where you’re logged in”.
    • Check recent sign-in activity for devices, locations, or times you do not recognise.
    • Turn on 2-step verification, also called 2FA or MFA, if it is available.

  3. Confirm it is the exact same account

    • Check that the failing device is using the same sign-in identifier as the working device, such as the same email address, username, or phone number.
    • For work or school accounts, check that you are using the correct organisation sign-in page or app, not a personal-account route.
    • Check for a hidden account switcher in the app or browser profile.

  4. Remove common “false wrong password” causes on the failing device

    • Type the password manually once instead of using autofill.
    • If you copy and paste, paste into a plain notes app first to check for extra spaces or line breaks, then delete the note.
    • Check caps lock, sticky keys, and the keyboard language or layout.
    • Delete the saved password for only that site or app, then enter the new password again.
    • Try a private browsing window, or a different browser, to bypass cached cookies and extensions.

  5. Check device and connection issues

    • Set the device date and time to automatic, because wrong time can affect sign-in and one-time codes.
    • Turn off a personal VPN or proxy temporarily and try your normal connection.
    • If this is a work or school account and a VPN is required, use the official VPN and contact your IT helpdesk rather than changing network settings randomly.
    • Update the app from the official app store, or update the browser if you are signing in through a website.

  6. Use the provider’s official recovery route if it still fails

    • Use “Forgot password” or account recovery from the provider’s official website or app.
    • If password reset emails go to another email account, secure that email account first by changing its password, signing out other sessions, and turning on 2-step verification.
    • If you still have access on one device, do not sign out of it until you have another confirmed way back in.

  7. If the problem started after a suspicious message

    • Treat any message pushing you to “verify”, “unlock”, or “secure” your account as suspicious until checked.
    • Forward suspicious emails to [email protected].
    • Forward suspicious texts to 7726.
    • If you have responded to a scam, been hacked, lost money, or need to report cyber crime or fraud, use Report Fraud if you are in England, Wales or Northern Ireland. If you are in Scotland, contact Police Scotland on 101.

What can wait

  • You do not need to decide right now whether you were definitely hacked.
  • You do not need to reset every password today unless there are signs that other accounts are affected.
  • You do not need to wipe the device unless there are stronger signs of malware or your provider or IT support tells you to.
  • You do not need to contact police immediately unless there is an ongoing threat, a crime in progress, or financial loss.

Important reassurance

This pattern is common and often has a simple cause, such as autofill, a keyboard layout change, cached sessions, a timed lockout, or using a different sign-in route. Securing the account from the device that still works is a steady first move.

Scope note

These are first steps to stabilise sign-in and reduce immediate risk. If the account controls money, identity documents, work access, or sensitive information, later decisions may need provider support or specialist IT or security help.

Important note

This is general information, not legal, medical, financial, therapeutic, technical, or other professional advice. If you think you are in immediate danger or a crime is happening now, call 999. For non-emergencies, call 101.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us