Bank of America Online Banking Login Help

What you need before you sign in

Bank of America online banking uses two things to sign you in: an Online ID and a passcode. These are not your card number or your account number. If you set up online banking a while ago and don't remember creating an Online ID, it may have been assigned automatically when you enrolled, or you may have picked one yourself.

Have your Online ID and passcode ready before you start. If you only remember one of them, you can still get in, just skip ahead to the recovery section below instead of guessing.

Signing in step by step

On the sign-in page, you'll see two boxes: one for your Online ID and one for your passcode. Type both in carefully, since a locked-out account is often caused by a typo rather than a forgotten password. Then select the sign-in or log-in button.

If your Online ID and passcode are correct, you'll either land straight in your account, or you'll be asked to confirm your identity first. Whether that extra step happens depends on the device and browser you're using.

Why you might be asked for a code

If you're signing in from a phone, computer, or browser that hasn't been used for this account before, expect an extra identity check. A short code gets sent to a phone number or email address already on file for the account, and you'll need to enter that code on the sign-in screen to continue.

This code expires after a short window, so if you wait too long before entering it, request a new one instead of trying the old code again. You generally can't choose to skip this step on a device the bank doesn't recognize yet — it's tied to keeping the account secure, not to anything you did wrong.

If you don't have access to the phone number or email on file anymore, you won't be able to receive this code, and you'll need to go through account recovery instead of a simple sign-in.

Common sign-in problems

A few things send people back to square one:

• Typing the Online ID or passcode wrong more than once. Too many failed attempts can temporarily lock the account as a security measure.
• Using a browser with JavaScript turned off, or a very old browser version. The sign-in page needs both enabled to load properly.
• Saved cookies or cached data causing the page to behave oddly, like refusing to accept a correct passcode or getting stuck on a blank screen.
• Signing in from a new device or location, which triggers the identity check described above instead of a normal login error.

If the page seems to reject a password you're sure is correct, try clearing your browser's cookies or switching to a different browser before assuming the account itself is the problem.

If you forgot your Online ID or passcode

There's a separate recovery path for each one, and you don't need to remember both to start.

To recover a forgotten passcode, you'll be asked to verify who you are using account details you should already have on hand: part of a card or account number, and identifying information like a Social Security number or Tax ID number, plus your date of birth. After that, you'll usually be given a choice of a second verification method — using debit or credit card details, or having a one-time code sent to a phone number on file.

Once you're verified, you'll be able to create a new passcode. Expect some basic rules, like a minimum length and a mix of letters and numbers.

Recovering a forgotten Online ID follows a similar identity-verification pattern, using account and card information rather than something memorized.

If your account is locked

A lock usually happens after several sign-in attempts fail in a row. It's a safety feature, not a sign that anything happened to your money. Going through the same recovery process used for a forgotten passcode will often clear a lock, since resetting the passcode re-verifies who you are. If the online recovery steps don't unlock it, contacting the bank directly is the fallback.

Signing in on a phone versus a computer

The mobile app and the website use the same Online ID and passcode, so there's nothing separate to set up for the app itself. Some devices support signing in with a fingerprint or face scan instead of typing the passcode every time, once you've turned that option on inside the app. If you're switching between a browser and the app, don't be surprised if the app asks you to sign in fully at least once before offering that shortcut again.

Before you try again

Double-check you're on {site}'s actual sign-in page rather than a bookmarked or search-result link that may be outdated. If you keep hitting the same error after trying the steps above, the fastest path is usually the official recovery flow rather than repeated login attempts, since too many failed tries is what triggers a lock in the first place.