Start with the account, then check the mailbox
You select “Forgot password,” the site says to check your email, and nothing arrives. Before submitting more requests, check the address you entered, the way you normally sign in, and whether your mailbox can receive other messages.
Confirm the account address, search Spam and other folders, check filters and storage, and follow the service's resend instructions. If you usually choose Continue with Google, Apple, or a work account, start with that sign-in method.
Record which service you are trying to enter and which email provider receives its messages. Resetting an online store password and recovering the Gmail account that receives the reset email are different tasks.
1. Check the exact address and normal sign-in method
Look for a typo, an old work address, or the wrong domain ending. If you are still signed in on another device, check the account's profile for the address on file before signing out. Do not create a replacement account just to test delivery; you may end up with two separate profiles.
If you normally use a Google, Apple, or employer sign-in button, try that route from the service's official sign-in page. An email-password reset may not be the right recovery path for that account. Follow the service's instructions rather than assuming every sign-in option shares one password.
A confirmation screen also does not prove that an account exists for the address entered. OWASP's password-reset guidance recommends giving the same response for registered and unregistered addresses to protect account privacy.
2. Search beyond the inbox
Open the email provider's own website and search for the service name and words such as “reset” or “verification.” Check Spam or Junk, Archive, Trash or Deleted Items, and any inbox tabs. This comparison helps separate a missing message from a mail app that has not refreshed.
Gmail: use the search options to include Mail & Spam & Trash. Review Settings → See all settings → Filters and Blocked Addresses for rules that skip the inbox or delete messages. Google's missing Gmail messages guide explains those checks.
Outlook.com: check Junk Email and the Other tab, then review rules and forwarding. Microsoft's send-and-receive troubleshooting guide covers those locations.
For a work mailbox, ask IT whether the message was quarantined. Give them the service name and approximate request time. A company filter can act before a message reaches your visible Junk folder.
3. Check whether other new email arrives
Ask someone you trust to send a short test message. If that is missing too, investigate the mailbox rather than focusing only on the password-reset service.
Google notes that Gmail shares storage with Drive and Photos, and full storage can affect incoming mail. Microsoft likewise warns that full Microsoft cloud storage can prevent Outlook.com from receiving messages. Review your provider's storage page and keep important records before removing anything.
After resolving a delivery problem, request a fresh reset email. In Outlook.com, Microsoft says messages sent while cloud storage was full are bounced back and cannot be recovered. Do not assume a previously failed delivery will automatically appear later.
Our cloud sync versus backup guide explains why deleting synced files deserves a little planning.
4. Resend deliberately and use the correct recovery route
Follow the service's displayed wait time or resend guidance. Avoid repeatedly submitting the form while you search. Microsoft warns that excessive verification requests can trigger blocks in its verification-code troubleshooting guidance.
For an Apple Account, Apple's missing verification or password-reset email guide explains checking associated addresses and resending. It distinguishes where password-reset and verification messages are sent, so use the instructions for the message you actually requested.
If the email arrives but the link is expired or already used, return to the official site and request a fresh one according to its instructions. Secure reset links are designed to expire and be single use; there is no universal expiry time for every service.
If you cannot access the receiving mailbox, use the service's account-recovery process or an already configured alternative. A different email address is not automatically interchangeable with the one on the account.
5. Send support a useful, private report
Use the support route linked from the official app or website. Include the account address in that private request, the approximate request time and time zone, the error text, and whether other new email arrives.
“I requested a password reset around 2:15 p.m. Eastern. I checked Junk, other folders, rules, and storage. Other new email arrives, but this service's reset message is missing. My usual sign-in method is email and password. Please advise on the recovery steps.”
Keep passwords, verification codes, and full reset links out of the report. Our email security guide covers ways to protect the mailbox that supports your other accounts.
Common questions
How long should I wait?
Use the service's stated delivery estimate and cooldown. While waiting, check the address and mailbox. If its stated window passes, follow the resend or support instructions; a delivery estimate for one provider does not apply to every site.
What if I receive a reset email I did not request?
Do not share its code or follow it just because it arrived. Open the service through your usual app or a known address and review account security there. Consider a supported passkey or other stronger sign-in option once you regain access.
Make your next sign-in easier to manage.
Learn how passkeys differ from passwords and which recovery questions to consider before changing your sign-in method.