Tutanota

Password reset guide · Work & Tools

How to reset your Tutanota password

Q: What is Tutanota's password reset page?

https://tuta.com/support. Go there directly rather than through a link in an email, since reset pages are widely impersonated.

Do it by hand with the steps below, checked against Tutanota's own documentation. Or connect Gmail once and Repass runs the same flow for you and seals the new password in your vault.

Reset Tutanota for Me Show manual steps

~2 minutes · email recovery · 3-day free trial

At a glance

Tutanota password reset, in one table

Verified facts about resetting a Tutanota password
Reset by email	No
What the email contains	a reset code
Works with Repass	No password to reset

Checked against Tutanota's own documentation. Sources.

The manual way

Reset your Tutanota password in 5 steps

Open Tutanota's password reset page
Go straight to tuta.com/support. This is the same place the “Forgot password?” link on the sign-in screen sends you, so starting here saves a step and, more importantly, means you are typing your details into Tutanota's own domain rather than whatever a search result offered you.

That matters more than it sounds. Password reset pages are the single most impersonated page on the internet, because a convincing copy collects exactly what an attacker needs. Check the address bar reads tuta.com/support before you type anything.
Enter the email on the account
Type the email address the account uses. If you are not certain which address that is, search every inbox you own for old mail from tuta.com: receipts, sign-in alerts, notification digests. The inbox holding those is the account email, whatever you assumed it was.

This is where most resets quietly fail. People request a reset for the address they use today, get nothing, and conclude the account is gone, when in fact the reset went to an address they stopped checking years ago.
Enter the verification code
Tutanota sends a verification code. Type it on the reset page to prove the request came from you.

Codes expire quickly, usually within minutes. If yours is rejected, request a fresh one rather than retyping the old one, and check you are not reading a code from an earlier attempt still sitting further up the inbox.
Choose a strong new password
Use 16 or more random characters, and never one you have used anywhere else. A reused password turns one company's breach into a break-in everywhere you reused it.
Store it somewhere sealed
Save it in a password manager or encrypted vault. Not a note, not a screenshot, and not “the usual one with a 2 on the end”, which is the same password as far as anyone attacking it is concerned.

The Repass way

Watch Repass reset Tutanota.

Finding your Tutanota account
Opening password recovery
Waiting for the reset email
Reset email found
Generating a 20-character password
Sealing it in your vault

You never give Repass your current Tutanota password. It uses Tutanota's ordinary account-recovery process to replace it, the same flow you would click through yourself.

An illustration of the agent's phases. Timings shown are not measured.

Get Started

When it goes wrong

Trouble resetting Tutanota?

Irreversible Loss of Access

If you lose both your password and your second factor, there is no option to reset your Tutanota account for security reasons. Source

The reset email never arrived

Check spam and promotions, confirm the address you entered is the one the account uses, then request one more. Repeated requests can rate-limit you, so wait a few minutes between attempts rather than hammering the button.

Your phone number changed

You will need the account's other contact method. Update the number as soon as you are back in, or the next reset has the same problem.

You think someone else is in the account

Reset first, then change the same password everywhere else you used it.

There is no password to reset

If you originally signed up with Google, Apple or Facebook, the account has no password of its own. Sign in the way you did the first time.

After the reset

Your password was not the only thing to fix.

1Check the recovery email on the account

The next reset goes to whatever address is on file today. If that is an inbox you no longer open, you are one forgotten password away from being locked out for good.

2Check the recovery phone number

Same reasoning. An old number is worse than no number, because it can end up reassigned to a stranger.

3Change it anywhere you reused it

If this password was used elsewhere, those accounts are as exposed as this one was. That is the job Repass exists to do in bulk.

Context

Why are you resetting your Tutanota password?

I just forgot it

The ordinary case, and what the steps above are for. Nothing is wrong with the account.

I think someone else knows it

Reset it, then change the same password anywhere else you used it, since that is usually how they got it.

I reused it somewhere else

Change it here and everywhere else. Until you do, the weakest site holding that password decides the security of all of them.

It showed up in a breach

Rotate it even if Tutanota was never breached. Passwords travel between sites in your head, not in theirs.

I have not changed it in years

Age alone is not a reason. Being reused, guessable or exposed is. Unique and random can be left alone.

Side by side

Repass, or Tutanota by hand

Step	Repass	By hand
Find the right account	Automatic	You
Open the reset flow	Automatic	You
Search the inbox	Automatic	You
Open the reset link	Automatic	You
Generate a strong password	Automatic	You
Save it somewhere safe	Automatic	You
CAPTCHA	You approve	You
Texted code	You approve	You
Repeat for 50 accounts	Automatic	An afternoon

Get Started

Straight from the source

Official Tutanota password and account links

Every fact on this page was checked against these pages. If Tutanota changes something, they are right and we are stale, so go to them first.

Questions

Tutanota password reset FAQ

How do I reset my Tutanota password?

Open tuta.com/support, enter the email on the account, type the code you are sent, and set a new password. It usually takes a couple of minutes.

What is Tutanota's password reset page?

tuta.com/support. Go there directly rather than through a link in an email, since reset pages are widely impersonated.

Can I reset my Tutanota password using email?

Tutanota's documentation does not describe an email-based reset. Use the method its help centre does describe.

Why isn't my Tutanota reset email arriving?

Check spam and promotions first, then check whether you requested the reset for the address the account actually uses. Most “no email” cases are a reset sent correctly to an inbox the person no longer opens. Searching your inboxes for older mail from tuta.com tells you which account is the real one.

What should I do if my Tutanota account was hacked?

Reset the password immediately. Then change it anywhere else you used the same password, because that is usually how they got in.

Can Repass reset my Tutanota password for me?

Tutanota does not document an email-based reset, so Repass cannot drive it end to end. If Tutanota asks for a CAPTCHA or a texted code, Repass stops, shows you the page, and asks you for that one step.

Does Repass need to know my current Tutanota password?

No, and it never asks for one. Repass uses Tutanota's ordinary account-recovery flow to replace the password, which is why it works on accounts whose password you have already forgotten.

Is it safe to let software reset my Tutanota password?

Repass generates and encrypts passwords on your own device, and the model that drives the reset is never shown a password, a reset link or a verification code. Those stay local to your browser. Repass does hold a key that can unwrap your vault, so that signing in is enough to open it on any device; you can revoke that key, after which your master password is the only way in.

Beyond Tutanota