What to do about unexpected messages from GOV.UK One Login
What to do if you get an email, text message or phone call from GOV.UK One Login that you were not expecting or think may be a scam or a hack.
The best way to keep your GOV.UK One Login safe and to protect you from a scam or a hack is to:
- set up a passkey
- change your password
You should do both these things if you get a message that you were not expecting. This could be:
- an email telling you to reset your password
- an email saying your details have been updated
- an email or text message with a security code
- an email asking you to sign in
- a phone call
Set up a passkey
Set up a passkey if you get a message that you were not expecting.
This means you can sign in to your GOV.UK One Login without needing your password and a security code.
Instead, you’ll sign in the same way you unlock your phone, computer or tablet, for example by:
- scanning your face or fingerprint
- entering your device passcode, PIN or pattern
Change your password
You should also change your GOV.UK One Login password.
We recommend that you:
- create a secure and memorable password, for example by using 3 random words
- use a different password to the one you use to sign in to your email
Other ways to keep your information safe
Do not:
- respond to a message that could be a phishing scam - check how to recognise scams if you’re not sure
- tell anybody your security code or any other information, including if they ask you for this information on the phone
You can also report internet scams and phishing.
Contact GOV.UK One Login if you need more help.
Updates to this page
-
Updated what you should do if you get an unexpected message from GOV.UK One Login - to explain that you should set up a passkey and change your password.
-
Added Welsh translation
-
First published.