Password reset guide · Payments
How to reset your Afterpay password
Do it by hand with the steps below, checked against Afterpay's own documentation. Or connect Gmail once and Repass runs the same flow for you and seals the new password in your vault.
At a glance
Afterpay password reset, in one table
| Works with Repass | Yes |
|---|
Checked against Afterpay's own documentation. Sources.
The manual way
Reset your Afterpay password in 5 steps
Open Afterpay's sign-in page
Go to afterpay.com, open the sign-in screen, and look for “Forgot password?”. Sites also label it “Can't log in?”, “Trouble signing in?” or simply “Get help”.
Navigate there yourself rather than following a link from an email or a search ad. Reset pages are the most impersonated pages on the web precisely because a convincing copy collects everything an attacker needs in one form.
Enter the email on the account
Type the email address the account uses. If you are not certain which address that is, search every inbox you own for old mail from afterpay.com: receipts, sign-in alerts, notification digests. The inbox holding those is the account email, whatever you assumed it was.
This is where most resets quietly fail. People request a reset for the address they use today, get nothing, and conclude the account is gone, when in fact the reset went to an address they stopped checking years ago.
Open what you are sent and follow it
Afterpay sends a reset message. Depending on the route and the device, that is either a link to follow or a short code to type. Do whichever it turns out to be.
Either way it is short-lived and single-use. If you leave it for an hour, expect to request a fresh one rather than to be told why the old one stopped working, and check spam before assuming nothing was sent.
Choose a strong new password
Use 16 or more random characters, and never one you have used anywhere else. A reused password turns one company's breach into a break-in everywhere you reused it.
Store it somewhere sealed
Save it in a password manager or encrypted vault. Not a note, not a screenshot, and not “the usual one with a 2 on the end”, which is the same password as far as anyone attacking it is concerned.
The Repass way
Watch Repass reset Afterpay.
- Finding your Afterpay account
- Opening password recovery
- Waiting for the reset email
- Reset email found
- Generating a 20-character password
- Sealing it in your vault
You never give Repass your current Afterpay password. It uses Afterpay's ordinary account-recovery process to replace it, the same flow you would click through yourself.
An illustration of the agent's phases. Timings shown are not measured.
When it goes wrong
Trouble resetting Afterpay?
The reset email never arrived
Check spam and promotions, confirm the address you entered is the one the account uses, then request one more. Repeated requests can rate-limit you, so wait a few minutes between attempts rather than hammering the button.
Your phone number changed
You will need the account's other contact method. Update the number as soon as you are back in, or the next reset has the same problem.
You think someone else is in the account
Reset first, then change the same password everywhere else you used it.
There is no password to reset
If you originally signed up with Google, Apple or Facebook, the account has no password of its own. Sign in the way you did the first time.
After the reset
Your password was not the only thing to fix.
1Check the recovery email on the account
The next reset goes to whatever address is on file today. If that is an inbox you no longer open, you are one forgotten password away from being locked out for good.
2Check the recovery phone number
Same reasoning. An old number is worse than no number, because it can end up reassigned to a stranger.
3Change it anywhere you reused it
If this password was used elsewhere, those accounts are as exposed as this one was. That is the job Repass exists to do in bulk.
Context
Why are you resetting your Afterpay password?
I just forgot it
The ordinary case, and what the steps above are for. Nothing is wrong with the account.
I think someone else knows it
Reset it, then change the same password anywhere else you used it, since that is usually how they got it.
I reused it somewhere else
Change it here and everywhere else. Until you do, the weakest site holding that password decides the security of all of them.
It showed up in a breach
Rotate it even if Afterpay was never breached. Passwords travel between sites in your head, not in theirs.
I have not changed it in years
Age alone is not a reason. Being reused, guessable or exposed is. Unique and random can be left alone.
Side by side
Repass, or Afterpay by hand
| Step | Repass | By hand |
|---|---|---|
| Find the right account | Automatic | You |
| Open the reset flow | Automatic | You |
| Search the inbox | Automatic | You |
| Open the reset link | Automatic | You |
| Generate a strong password | Automatic | You |
| Save it somewhere safe | Automatic | You |
| CAPTCHA | You approve | You |
| Texted code | You approve | You |
| Repeat for 50 accounts | Automatic | An afternoon |
Straight from the source
Official Afterpay password and account links
Every fact on this page was checked against these pages. If Afterpay changes something, they are right and we are stale, so go to them first.
Questions
Afterpay password reset FAQ
How do I reset my Afterpay password?
Open the sign-in page on afterpay.com and choose “Forgot password?”, enter the email on the account, follow the link you are sent, and set a new password. It usually takes a couple of minutes.
Why isn't my Afterpay reset email arriving?
Check spam and promotions first, then check whether you requested the reset for the address the account actually uses. Most “no email” cases are a reset sent correctly to an inbox the person no longer opens. Searching your inboxes for older mail from afterpay.com tells you which account is the real one.
What should I do if my Afterpay account was hacked?
Reset the password immediately. Then change it anywhere else you used the same password, because that is usually how they got in.
Can Repass reset my Afterpay password for me?
Yes. Connect Gmail once and Repass walks Afterpay's forgot-password flow itself: it requests the reset, reads only its own reset email, sets a strong 20-character password and seals it in your vault. If Afterpay asks for a CAPTCHA or a texted code, Repass stops, shows you the page, and asks you for that one step.
Does Repass need to know my current Afterpay password?
No, and it never asks for one. Repass uses Afterpay's ordinary account-recovery flow to replace the password, which is why it works on accounts whose password you have already forgotten.
Is it safe to let software reset my Afterpay password?
Repass generates and encrypts passwords on your own device, and the model that drives the reset is never shown a password, a reset link or a verification code. Those stay local to your browser. Repass does hold a key that can unwrap your vault, so that signing in is enough to open it on any device; you can revoke that key, after which your master password is the only way in.
Beyond Afterpay
What else Repass does
Find accounts connected to your email
Every service you ever signed up for sent you an email. Repass reads those to build the list, so you find out about the 2016 forum account before somebody else does.
Reset reused passwords
Reuse is the single thing that turns somebody else's security failure into your problem. Repass replaces them in bulk instead of one painful evening at a time.
Reset compromised passwords
Rotating an exposed password matters more than rotating an old one. Repass does the rotation, on every account that needs it.
Generate strong passwords
The passwords Repass sets are made locally and never leave your machine in a form anyone else can read.
Store passwords securely
Your vault is sealed on your device, and what our servers store is ciphertext. Repass does hold a key that can unwrap it, so signing in opens your vault with nothing to type; revoke that key and your master password becomes the only way in.
Change passwords automatically
Repass drives each site's real forgot-password flow in your own browser, and stops to ask when a site wants a human.
More Payments guides
Reset another payments password
Popular
Two minutes from now
Your passwords stop being your problem.
3-day free trial · encrypted vault · you can watch every step