A login message saying the password is wrong does not necessarily mean the password really is wrong. A mistyped account name, the wrong keyboard state, a locked account, or a network or verification problem can all show similar messages. Work out which kind it is before acting; changing the password at random can lock the account even harder.
Three quick checks first
First, check the account: confirm whether login uses an email address, phone number or username, whether upper and lower case and leading or trailing spaces are correct, and if you have several email addresses, try the one usually used for that service. Second, check the keyboard: whether Caps Lock is on, whether the input method is left in Chinese mode, and whether the password contains full-width symbols; phones are especially prone to mistyped letters and symbols. Third, read the exact message: whether the page says wrong password, account does not exist, or too many login attempts. The next step is completely different for each, so keep a screenshot of the exact message before acting.
Only use the recovery flow once the password is confirmed wrong
If the three checks are fine, use the official password recovery flow. Only use a reset link sent through the official entry on the login page; do not click reset links of unknown origin in text messages or emails. Choose a new password that has not been used elsewhere, meeting the page's length and complexity requirements, log in once on the original device to confirm it works, and only then log in on other devices. If two-factor authentication is on, have the authenticator or backup codes ready first; if a verification code does not arrive, see the next section, and do not keep tapping send, because many requests in a short time may be rate-limited by the system.
If the verification code does not arrive, check item by item
First check whether the phone number or email address was entered wrongly, whether the text was intercepted into a spam folder, and whether the verification email landed in the promotions or spam folder. Then check signal and network: flight mode, weak signal and VPNs all affect delivery, so turn the VPN off, switch to a stable network and request once more. A voice verification code is usually more reliable than text, so use the voice option when the page offers it. For email verification, check whether the mailbox is full and whether the sender has been blocked. After several requests, only the newest code counts; entering an old code will also report it as invalid.
If the account is locked or flagged as abnormal, do not force it
Entering the wrong password many times in a short period can temporarily lock the account; wait for the lock period to pass before trying again, because forcing it only extends the lock. When the page says the account is abnormal or identity verification is needed, complete the official identity verification flow, and do not look for third-party unlock services. Once you have confirmed it is your own account, check whether there have been logins from unfamiliar devices or abnormal-login alerts; if anything is off, change the password first, sign out other devices, and turn on two-factor authentication. When the problem is on the service side, the page usually shows a status notice or announcement; wait for the service to recover instead of resetting the password repeatedly.
