Passwords and those 6-digit codes

Locked out, or staring at a text with a 6-digit code wondering what to do with it? This clears up the whole password-and-code business in plain language — and keeps you safe from the scams that target exactly this.

Your phone already remembers your passwords

You don’t have to memorize them all — your phone has a built-in vault.

• iPhone: Settings → Passwords (it’ll ask for Face ID or your passcode). Tap any account to see the saved password.
• Android / Chrome: open Chrome → ⋮ menu → Passwords, or go to passwords.google.com.

When a site asks you to make a password, let the phone suggest and save a strong one. You’ll never need to remember it — the phone fills it in.

Those 6-digit codes (two-factor)

More and more accounts text you a 6-digit code when you log in. It’s a second lock: even someone who knew your password can’t get in without the code on your phone.

What to do with one:

1. You asked to log in (or reset a password) on a website or app.
2. A code arrives by text or in an authenticator app.
3. Type that code into the same screen you were just using. That’s it.

The #1 scam — read this

Never read a code out loud or type it anywhere because someone asked you to. No real bank, Apple, Amazon, or “support agent” will ever call or text asking for your code. If someone does, it’s a scam to break into your account — hang up. Codes are only ever typed into the screen you opened yourself.

Resetting a password you forgot

1. On the login screen, tap “Forgot password?” (every site has it).
2. It sends a link or code to your email or phone to prove it’s you.
3. Follow that to set a new password — and let your phone save it this time.

Your Apple ID / Google account is the master key

Almost everything on your phone hangs off one main account:

• iPhone → Apple ID (an email + password).
• Android → Google account (an email + password).

If apps suddenly ask you to sign in, or photos/contacts vanish, you’ve usually been signed out — sign back in with this account and it all comes back. Keep this one password somewhere safe, and make sure its recovery email/phone is current, because it’s the key to everything else.

When you’re stuck

1. Don’t guess 10 times — many accounts lock after several wrong tries. Use “Forgot password?” instead.
2. Code not arriving? Check you have signal, wait a minute, or tap resend.
3. Someone’s pressuring you for a code or password? Stop — that’s a scam. Text Stephen before doing anything.
4. Still locked out? Text Stephen and tell him which account (email? bank? Apple/Google?) — don’t share the actual password in the text.