You go to check your AT&T email and the sign-in screen pushes back. Maybe the password you have always used is suddenly rejected, maybe the account says it is locked, or maybe your phone keeps prompting you to sign in again and again.
Most AT&T email sign-in failures come down to a small set of causes: a mistyped or stale password, a recent account-password change, a temporary security lock, or a mail app that needs a special key instead of your normal password. The fixes below are ordered from the quickest and most common to the deeper account-recovery steps, so start at the top and stop as soon as you are back in.
AT&T Mail covers @att.net, @sbcglobal.net, and @bellsouth.net addresses, so these steps apply no matter which of those your email uses.
Enter Your ID and Password Manually
The single most common cause is a simple typo or a browser auto-fill that dropped in old, saved credentials. AT&T's own guidance starts here: "Make sure you entered your ID and password correctly."
Type your full AT&T ID and password by hand instead of relying on auto-fill. Watch for caps lock and trailing spaces. If you use a password manager, confirm it is offering the current password and not a version you changed weeks ago.
Use Your AT&T ID Password (It Is the Same Password)
This trips up a lot of people. Your AT&T Mail password and your AT&T ID (myAT&T account) password are the same. As AT&T puts it: "The password used to sign into your email and AT&T are the same. If you change your AT&T Mail password, your AT&T ID password will change, too."
So if you recently updated your myAT&T account password, your email password changed with it. Sign in to email using that same new password. Any old saved password on your devices will now fail until you update it.
One legacy exception: some older setups use a separate email password. If you normally use the same ID and password for both your AT&T account and your email, changing the account password means you also need to update it in your AT&T Mail account.
Wait Out a Temporary Account Lock
AT&T may lock an account after too many sign-in attempts: "For your protection, we may lock your account after too many sign-in attempts." This is often just a typo repeated a few times, not a real security problem.
The simplest fix is to wait. AT&T advises: "Wait an hour and try to access your email again." The lock typically clears on its own after about an hour, so step away and come back rather than hammering the login.
If you do not want to wait, resetting your password also clears this state. If you suspect someone else triggered the lock, jump to the hacked-account steps further down.
Sign Out, Then Sign Back In
A stale browser session can hold a bad login. AT&T's straightforward suggestion: "Try signing out of your email account and signing back in."
Sign out fully, close the tab, then open AT&T Mail fresh and sign in again with manually typed credentials.
Clear or Allow Cookies and Try Another Browser
Corrupt cookies or cached data can block sign-in. First, verify that your browser accepts cookies, since AT&T Mail needs them to keep you signed in.
If the problem persists in your usual browser, open AT&T Mail in a different one. AT&T's example: if you normally use Google Chrome, try Firefox. If it works in the second browser, clear the cookies and cache in your original browser and try again.
Update the Password on Every Device
If you changed your password and email now works in one place but not another, the other devices are still using the old one. AT&T is explicit: "Update your password on all your devices to access your email."
Go through each phone, tablet, and computer that checks this account and replace the saved password with the current one. A single forgotten device can keep prompting you or even contribute to a lock.
Reset Your Password When You Don't Know It
If you cannot recall the password, reset it yourself. AT&T representatives cannot look up or provide your password; they have no access to it, so self-service reset is the path.
- 1.Go to AT&T's reset your password page.
- 2.Enter your AT&T ID and the last name associated with your ID.
- 3.Choose your verification method and follow the prompts.
- 4.Enter and confirm your new password.
Your new password must be 8 to 24 characters. It may include uppercase and lowercase letters, numbers, and only these special characters: + = # ? * $ ! _ -
Change Your Password When You Do Know It
If you can still sign in to your account and simply want to set a fresh password, do it from your profile.
- 1.Go to your AT&T account profile overview and sign in if prompted.
- 2.Find Password under Your info.
- 3.Select Edit next to Password.
- 4.Enter and save your updated password.
Remember the same 8 to 24 character rule and the allowed special characters above.
Use OAuth or a Secure Mail Key in Mail Apps
If your password is correct on the web but a desktop or mobile mail app reports an incorrect password or authentication failure, the app is the issue. AT&T recommends: "We suggest you only use email apps with OAuth (Open Authentication)." Each device must use either an OAuth-capable app or a 16-character secure mail key that replaces your AT&T password.
These apps support OAuth and need no secure mail key: Apple Mail, Outlook Mobile, and the Yahoo Mail app on iPhone or iPad (iOS 9.0 or later); Gmail, Outlook Mobile, and the Yahoo Mail app on Android (Lollipop 5.0 or later); Apple Mail on Mac OS 10.11 or later; and Windows Mail on Windows 10.
These apps require a secure mail key instead: Outlook 2010, 2013, 2016, and 2019; Mozilla Thunderbird; Windows Mail on Windows 8 or older; and Apple Mail on macOS 10.10 or older.
To create a secure mail key:
- 1.Go to your account profile and sign in.
- 2.Select Settings and confirm your account (use Switch if you have different services).
- 3.Select Add secure mail key, enter a nickname, then select Create.
- 4.Copy the key.
In your mail app, replace the existing password with this key. For an IMAP account, update both the incoming (IMAP) and outgoing (SMTP) servers with the key, not just one. Secure mail keys never expire, each device gets its own, and changing your AT&T email password does not require creating a new one.
Recover a Hacked or Compromised Account
Some sign-in failures are a security lockout. Signs you have been hacked include being unable to sign in, strange messages in your Sent folder, spam complaints, or a notice from the AT&T Internet Services Security Center. If the account was locked for your protection because it may have been hacked or phished, resetting the password is the fix, and you should also run the recovery steps below.
- 1.Change your password immediately: from your account profile, sign in, select Edit for Password, and follow the prompts.
- 2.Secure your devices: scan all computers with an up-to-date antivirus program, use anti-malware, and install operating-system security updates.
- 3.Review email settings: hover over the gear icon and choose Settings, then check your email signature for unrecognized changes; review Accounts for unknown POP or Forward entries and verify your sending name and reply-to; disable any Vacation response you did not set; open Blocked addresses and make sure your own address is not listed, removing it if it is; and delete unfamiliar Contacts.
- 4.After confirming malware is removed and your settings are clean, change your password again.
Note one side effect: if your account is locked or blocked, AT&T deletes your existing secure mail keys, so you will need to create new ones for each device after regaining access. Setting up security questions through myAT&T help prevents intruders from accessing your account or changing your info.
Know That Compromised-Password Alerts Are Not an AT&T Breach
If your iPhone, Android phone, or Google's password manager warns that your saved AT&T credentials were exposed, that alert points to a non-AT&T data breach where you reused the same password. As AT&T states: "The compromised password alert doesn't mean there's been a breach at AT&T."
Never click links inside those alert messages. Instead, change your password directly on AT&T's own site or in the app using the reset or change steps above.
Use the Account Recovery Webform as a Last Resort
If you cannot complete the standard reset, because you have forgotten the password and lack recovery info on file, or you have had too many unsuccessful login attempts, use AT&T's email account recovery webform.
On the page, try the Update password option first. If that will not work, select the button labeled Fill out webform and complete it with details about your email account and recent mailbox activity. It takes about five minutes and lets AT&T match your answers against internal records to verify your identity. AT&T says: "We strive to contact customers who have entered valid information within 72 hours," and an AT&T care agent will reach out if the account is validated.
Frequently Asked Questions
Why did my AT&T email password stop working after I changed my account password?
Because they are the same password. Changing your myAT&T account password also changes your email password, so any old saved password on your devices fails. Sign in with the new one, then update it on every device.
My account says it is locked. How do I unlock it?
A lock is usually triggered by too many failed attempts, often just a repeated typo. Wait about an hour and try again, or reset your password to clear the lock immediately. If you suspect unauthorized access, follow the hacked-account recovery steps.
Can AT&T just tell me my password over the phone?
No. AT&T representatives cannot look up or provide your password; they have no access to it. Use the self-service reset, or the recovery webform if you cannot complete the reset.
My password is correct, but Outlook or Thunderbird still rejects it. Why?
Those apps do not support OAuth, so they need a 16-character secure mail key in place of your AT&T password. Create one in your account profile under Settings, then update both the IMAP (incoming) and SMTP (outgoing) servers with it.
What are the rules for a new AT&T password?
It must be 8 to 24 characters and can use uppercase and lowercase letters, numbers, and only these special characters: + = # ? * $ ! _ -
My phone says my AT&T password was found in a data breach. Was AT&T hacked?
Not necessarily. AT&T states the compromised-password alert does not mean there was a breach at AT&T; it usually means the password was reused somewhere else that was breached. Do not click links in the alert. Change your password directly on AT&T's site or app.
