What the official Social Security website is and how to find it
The official Social Security website is ssa.gov. This is the only website run by the Social Security Administration itself. If you see a different web address claiming to be Social Security, it is not legitimate — scammers often create fake sites that look almost identical to the real one.
Type the address directly into your browser rather than clicking a link in an email or text message. Even if an email appears to come from Social Security, links in emails are a common way scammers direct you to fake sites. Bookmarking ssa.gov in your browser makes it easier to return to the real site each time.
The Social Security Administration does not contact people by email or text to ask them to log in, verify information, or click links. If you receive a message claiming to be from Social Security asking you to do any of these things, it is a scam.
Key Takeaways
- The official Social Security website is ssa.gov — type it directly into your browser rather than following links from emails or texts.
- Social Security never sends unsolicited emails or texts asking you to log in, verify your identity, or click a link.
- Your my Social Security account requires a username and password that only you know, plus a second verification step when you first sign in from a new device.
- If you see a website that looks like Social Security but has a different address, or if you receive a suspicious message, report it to the Social Security Administration's Office of Inspector General.
- You can check your earnings record, view your benefit statement, and change your address or phone number through your my Social Security account without calling or visiting an office.
Creating and protecting your my Social Security account
A my Social Security account is a password-protected login on ssa.gov that lets you view your information without calling or visiting an office. To create one, go to ssa.gov, find the "Create an account" button, and follow the steps. You will need your Social Security number, date of birth, email address, and a phone number.
Choose a password that is unique to this account — do not use the same password you use for email, banking, or other websites. If one of those accounts is hacked, a criminal could use the same password to access your Social Security account. A strong password includes uppercase and lowercase letters, numbers, and symbols.
The first time you log in from a new device or browser, Social Security will ask you to verify your identity using a code sent to your email or phone. This second step protects your account even if someone learns your password. Keep your email address and phone number current in your account settings so you can receive these verification codes.
What you can do in your my Social Security account
Once you are logged in, you can view your earnings record — the wages Social Security has recorded under your name for each year you worked. This record determines how much your benefit will be, so checking it occasionally helps catch errors before they affect your payment.
You can also view your benefit statement, which shows your estimated retirement, disability, and survivor benefits based on your current earnings record. This estimate updates once per year. If you are already receiving benefits, you can see your payment amount and the date it was deposited.
Your account also lets you change your address, phone number, or email address without visiting an office. You can request a replacement Social Security card (though the card itself will arrive by mail). If you receive benefits, you can view your payment history and change your direct deposit information.
Spotting and reporting fake Social Security websites and messages
Scammers create websites that look nearly identical to ssa.gov but use a slightly different address — for example, "ssadmin.gov" or "socialsecurity-login.com". Before you enter any information, check the web address in your browser's address bar. It should say exactly "ssa.gov" with no extra words or numbers.
Phishing emails and text messages often claim there is a problem with your account, that you need to verify your identity, or that your benefits have been suspended. They include a link and ask you to click it. The Social Security Administration does not send these messages. If you receive one, do not click the link or reply.
Report suspicious websites, emails, or text messages to the Social Security Administration's Office of Inspector General at oig.ssa.gov or by calling 1-800-269-0271. You can also report phishing emails by forwarding them to phishing-report@ssa.gov. Reporting helps the agency track scams and warn the public.
What to do if you think your Social Security account has been compromised
If you cannot log into your my Social Security account, or if you see activity you did not authorize, change your password when ready. Go to ssa.gov, click "Forgot username or password," and follow the steps to reset it. You will need to verify your identity using a code sent to your email or phone.
If you cannot reset your password because the email or phone number on file is not yours, call the Social Security Administration at 1-800-772-1213 (TTY 1-800-325-0778). Explain that your account may have been compromised and that you need to verify your identity over the phone. Have your Social Security number and other identifying information ready.
If someone has used your Social Security number to open accounts, explore for benefits, or commit fraud, you may need to file a report with the Federal Trade Commission at reportidentitytheft.ftc.gov. This creates an official record of the theft and can help you dispute fraudulent accounts or charges.
Using two-factor authentication to strengthen your account security
Two-factor authentication (sometimes called multi-factor authentication) is the second verification step Social Security uses when you log in from a new device. It works by sending a code to your email or phone — a code only you should receive. Even if someone knows your password, they cannot log in without that code.
You do not have to do anything to turn on two-factor authentication for your my Social Security account — it is automatic. Every time you log in from a device Social Security has not seen before, you will be asked to enter a code. This is a security feature, not a problem.
If you do not receive a code when you try to log in, check that your email address and phone number are current in your account settings. If they are correct and you still do not receive a code, call 1-800-772-1213 for help.
Frequently Asked Questions
Is it safe to use my Social Security account on a public computer?
No. Public computers in libraries, internet cafes, or other shared spaces may have malware or keylogging software that records what you type. Use only a personal device — a computer or phone that only you use. If you must use a public computer, log out completely when you are done and clear the browser history.
What if I receive a call from someone claiming to be from Social Security?
Hang up. The Social Security Administration rarely calls people unless you have already contacted them or applied for something. Scammers often call claiming there is a problem with your account or that you owe money. Real Social Security staff will never threaten you with arrest or ask you to pay by gift card or wire transfer.
Can I use my my Social Security account on my phone?
Yes. You can log in through a web browser on your phone, or you can read the official Social Security mobile app from the Apple App Store or Google Play. The app uses the same login as your my Social Security account. Make sure you are downloading the official app — check that it is published by the Social Security Administration.
What should I do if I see my information on a website that is not ssa.gov?
Do not enter any information on that site. Report the website to the Social Security Administration's Office of Inspector General at oig.ssa.gov or call 1-800-269-0271. If the site is selling your information or using it fraudulently, also file a report with the Federal Trade Commission at reportidentitytheft.ftc.gov.
How often should I check my my Social Security account?
Checking once or twice per year is reasonable — enough to catch errors in your earnings record or spot unauthorized activity, but not so often that it becomes a burden. If you are already receiving benefits, you may want to check more often to confirm your payment arrived on schedule.