Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To update your American Express account security settings in the United States, sign in through the official American Express website or Amex App, then review your password, two-step verification, saved devices, app notifications, contact details and alert preferences. In a browser, the key areas are Account Services, Security and Privacy, Authentication Management, Contact Information and Alerts and Card Profile. Exact labels and available options can differ by account, device and country.
This guide follows American Express’ current US instructions. If you use a non-US account, start with the market-specific American Express site or app; the Canadian help page, for example, uses different navigation labels. Do not open security links from unexpected messages. Open the official site or app yourself and sign in there.
Which American Express security settings can you change?
Most security changes fall into six groups. Knowing the destination before you sign in makes it easier to recognize the correct page and avoid phishing copies.
| Setting | US location or route | What it controls |
|---|---|---|
| Password | Account Services after sign-in | Your primary account sign-in credential |
| Two-step verification | Security and Privacy > Authentication Management in a browser | Whether Amex confirms a sign-in with a code or device notification |
| Saved devices | Manage Devices in the Amex App or the related security area | Phones, tablets or browsers allowed to receive identity prompts |
| App notifications | Your phone or tablet’s system notification settings, then the Amex App | Whether identity prompts can reach the enrolled device |
| Contact details and alert preferences | User Profile icon > Contact Information and Alerts | Email addresses, phone numbers and optional account alerts |
| Card fraud-alert contact details | Card Profile in the app or Account Management in a browser | Where Amex can send fraud notifications |
American Express describes two-step verification as an additional safety layer. It may use a one-time code or a notification sent to an enrolled device. Passkeys are another sign-in option on supported accounts and devices, but they are not guaranteed to appear for every member.
#1 Best Overall
- Gift Cards are shipped active and ready for use.
- This card is non-reloadable. No cash or ATM access. Funds do not expire. If available funds remain on your card after the valid thru date has passed, please call customer service for a replacement card. A one-time purchase fee applies at the time of checkout. No fees after purchase.
- To access your card information safely, type the complete website address shown on your Gift Card (MyGift.GiftCardMall.com) directly into your browser's address bar. Don't use search engines or shortened versions of the website address, as these may lead you to fake or fraudulent sites. Do not provide any Gift Card details (example: Card Number) to someone you do not know or trust. If you believe you've reached an illegitimate website, contact cardholder service at 1-888-524-1283. Be cautious of phishing sites, there are a variety of scams in which fraudsters try to trick others into paying with gift cards.
- To report your Lost or Stolen Physical Visa Card, call Customer Service 24/7 at 1 (888) 524-1283 to cancel your Gift Card as soon as you can. You will be asked to provide the Gift Card number and other identifying information.
- Use your Visa Gift Card in the U.S. everywhere Visa debit cards are accepted, including online.
Before changing anything
- Use the official American Express website for your country or the Amex App downloaded from your device’s legitimate app store.
- Have access to the email address or mobile number currently used for verification. A change may require a unique email confirmation and a security code.
- Keep your current phone or tablet available if it is the device receiving identity prompts.
- If you suspect someone else knows your password, change it immediately rather than waiting for the normal maintenance interval.
- Never disclose a verification code to an unexpected caller, texter or email sender.
American Express’ Security Center is the authoritative US reference for passwords, devices, verification, passkeys and fraud response. Menus can change, so use the labels displayed in your signed-in account when they differ from those below.
Step-by-step: update the US account settings
1. Sign in safely
- Open the American Express site or the Amex App yourself. Do not use a password-reset or verification link from an unexpected message.
- Select the sign-in option and enter your existing credentials. If the account asks for an identity check, use the code or notification route already associated with it.
- After signing in, confirm that the page is your normal account dashboard before opening security menus.
Phishing pages often copy logos and layout while attempting to capture passwords or one-time codes. If a message claims that your account is locked or requires urgent verification, close it and navigate directly to American Express instead.
2. Change your password in Account Services
- From the signed-in US website, open Account Services.
- Choose the password-change option and follow the prompts to enter the current password and create a new one.
- Save the new credential in a password manager if you use one, then sign out of any account sessions you no longer recognize.
American Express recommends changing a password every three to six months. That interval is Amex’s recommendation, not a universal security rule. Change it immediately if the password may be known to another person, has been reused on another website, or is associated with a fraud alert or other unusual activity.
Use a long, unique password that is not used for email, shopping or other financial services. A password manager can help generate and store unique credentials; American Express presents this as optional safety guidance on its SafeKey and online-safety page, not as a requirement or endorsement of a particular provider.
If you cannot complete the change because the current password is rejected, stop trying random variations. Use the official account-recovery path from the sign-in page, or call the number printed on the back of your Card if you believe the account may be compromised.
Rank #2
- Gift Cards are shipped active and ready for use.
- This card is non-reloadable. No cash or ATM access. Funds do not expire. If available funds remain on your card after the valid thru date has passed, please call customer service for a replacement card. A one-time purchase fee applies at the time of checkout. No fees after purchase.
- To access your card information safely, type the complete website address shown on your Gift Card (MyGift.GiftCardMall.com) directly into your browser's address bar. Don't use search engines or shortened versions of the website address, as these may lead you to fake or fraudulent sites. Do not provide any Gift Card details (example: Card Number) to someone you do not know or trust. If you believe you've reached an illegitimate website, contact cardholder service at 1-888-524-1283. Be cautious of phishing sites, there are a variety of scams in which fraudsters try to trick others into paying with gift cards.
- To report your Lost or Stolen Physical Visa Card, call Customer Service 24/7 at 1 (888) 524-1283 to cancel your Gift Card as soon as you can. You will be asked to provide the Gift Card number and other identifying information.
- Use your Visa Gift Card in the U.S. everywhere Visa debit cards are accepted, including online.
3. Review two-step verification in Authentication Management
- In a browser, open the security area of your account.
- Under Security and Privacy, select Authentication Management when that label is shown.
- Review the email address, phone number, notification method and other verification details listed for sign-in.
- Update the available options and complete any requested code or identity confirmation.
Two-step verification confirms that the person entering the password also controls an approved contact method or device. Depending on your account, Amex may present a notification prompt or a one-time verification code. The exact controls can vary by account and device, so do not assume that an option described for one member will appear for every member.
4. Remove lost or obsolete saved devices
- Open the device-management area shown in your account or app, usually labeled Manage Devices.
- Review every listed phone, tablet or other enrolled device and compare the names with equipment you currently own.
- Remove devices that are lost, stolen, sold, replaced or no longer used.
- Keep only devices you recognize and can protect with a screen lock, fingerprint, Face ID or passcode.
Removing a device prevents it from remaining an approved destination for identity prompts. Amex may ask you to add a replacement device again after a reinstall, operating-system change, browser reset or other security event. That re-enrollment is a protection, not evidence that the account is broken.
Free tools Windows power users keep installed
One-click scans. No signup required.
5. Make Amex App identity notifications reliable
- Install the current Amex App or update it from your device’s official app store.
- In the phone or tablet’s system settings, allow notifications for the Amex App. Check both general notification permission and any focus, do-not-disturb or lock-screen restrictions.
- Open the app and use Manage Devices to add the device if it is not already enrolled.
- When prompted during sign-in, wait for the identity notification on the most recently added device.
- If it does not arrive, select Resend Notification. If that still fails, choose Send Verification Code Instead and use the code delivered by the available channel.
American Express says the identity notification goes to the most recently added device. Consequently, adding a new phone can redirect prompts away from an older phone that you still carry. If you have several enrolled devices, check the newest one first.
Notification delivery also depends on an internet connection, the app being allowed to run, correct device time and a working push-notification service. Restarting the app, switching between Wi-Fi and mobile data, and checking for a pending app update can resolve a delivery failure without changing your security settings. Do not repeatedly request codes if the first one may still arrive; use the newest valid code shown by the sign-in screen.
6. Update email, phone and account-alert preferences
- On the US website, select the User Profile icon at the top right.
- Choose Contact Information and Alerts.
- Edit the email address, phone number or alert preference you need to change.
- Complete the requested confirmation. American Express may require a unique email address and a security code when those details have not already been established.
- Review the saved values carefully, including country code, spelling and the number that can receive SMS messages.
The contact-information workflow is documented in American Express’ online account support instructions. A contact address used for marketing is not necessarily the same channel used for identity verification, so check the security and alert pages rather than assuming one change updates every purpose.
Rank #3
- Cards are shipped active and ready for use.
- This card is non-reloadable. No cash or ATM access. Funds do not expire. If available funds remain on your card after the valid thru date has passed, please call customer service for a replacement card. A one-time purchase fee applies at the time of checkout. No fees after purchase.
- Double check if the URL/website is genuine before entering card details online. Do not provide any gift card details (example: claim code) to someone you do not know or trust. There are a variety of scams in which fraudsters try to trick others into paying with gift cards.
- If you believe that your Card has been lost or stolen, notify Mastercard immediately by calling 1-833-791-7288. You will be asked to provide the Gift Card number and other identifying information.
- Use your Mastercard Gift Card in the U.S. everywhere Mastercard debit cards are accepted, including online. Your Amazon.com Balance cannot be used to purchase Mastercard gift cards.
7. Check fraud-alert delivery in Card Profile
- Open Card Profile in the Amex App, or open Account Management in a browser and locate the card-profile details.
- Confirm that the email address and phone number shown there are current and reachable.
- Review the available delivery choices for fraud alerts and save any permitted changes.
American Express says fraud alerts are generated automatically when it detects unusual activity. Email fraud alerts cannot be disabled. Members can decline text delivery, but turning off text messages does not turn off fraud monitoring or email alerts. Keeping the contact details in Card Profile accurate helps those automatic notices reach you.
A fraud alert is different from an ordinary optional notification such as a payment reminder or promotional message. Treat an unexpected fraud alert as a reason to inspect recent transactions through the app or website and contact Amex through an official channel.
8. Consider a passkey when your account offers it
American Express describes passkeys as an alternative to typing a password. With a supported account and device, sign-in can use the same Face ID, fingerprint or device passcode used to unlock the device. A passkey is tied to the device’s protected credential system; it is not the same as saving a password in a browser.
Availability depends on the account, device, operating system and the options Amex has enabled for that member. If a passkey control is not shown, continue using the available password and two-step-verification methods. Enrolling a passkey does not justify deleting every other recovery method: keep an up-to-date contact channel and a recognized backup device.
Choosing a sign-in confirmation method
Amex’s documented methods have different practical requirements. Use the route that matches the device and contact information you can reliably access.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Rank #4
- Gift Cards are shipped active and ready for use.
- This card is non-reloadable. No cash or ATM access. Funds do not expire. If available funds remain on your card after the valid thru date has passed, please call customer service for a replacement card. A one-time purchase fee applies at the time of checkout. No fees after purchase.
- To access your card information safely, type the complete website address shown on your Gift Card (MyGift.GiftCardMall.com) directly into your browser's address bar. Don't use search engines or shortened versions of the website address, as these may lead you to fake or fraudulent sites. Do not provide any Gift Card details (example: Card Number) to someone you do not know or trust. If you believe you've reached an illegitimate website, contact cardholder service at 1-888-524-1283. Be cautious of phishing sites, there are a variety of scams in which fraudsters try to trick others into paying with gift cards.
- To report your Lost or Stolen Physical Visa Card, call Customer Service 24/7 at 1 (888) 524-1283 to cancel your Gift Card as soon as you can. You will be asked to provide the Gift Card number and other identifying information.
- Use your Visa Gift Card in the U.S. everywhere Visa debit cards are accepted, including online.
| Method | What you need | Main advantage | Common failure | Fallback |
|---|---|---|---|---|
| App notification | An enrolled, internet-connected device with Amex notifications allowed | Fast approval without typing a code | Push permission disabled, wrong device enrolled or notification delayed | Resend Notification, then Send Verification Code Instead |
| One-time code | Access to the email address or phone number Amex displays | Works when push notifications are unavailable | Outdated contact details, blocked SMS or delayed email | Update contact details after signing in, or use official account recovery |
| Passkey | A supported account and device with its biometric or device-passcode unlock | Resists password reuse and avoids typing a password | Option unavailable, device replaced or passkey not accessible | Use the account’s password and verification route |
Do not approve a notification or enter a code merely because a caller says it is required. Start a sign-in yourself. An unsolicited prompt can indicate that someone else is attempting to access the account.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to do when a setting or code does not work
The menu name is different
Account menus change and can differ between web and app experiences. Look for the closest equivalent under profile, account services, security, privacy or device management. The Canadian American Express FAQ, for example, refers to Manage Accounts and Security and Privacy rather than reproducing every US path. Use the market-specific help page if your account is outside the United States: Canadian security-information FAQ.
The verification code never arrives
- Confirm that the sign-in page is showing the correct masked email address or phone number.
- Check spam, junk and filtered-mail folders for an email code.
- Verify that the phone has cellular service, can receive short-code messages and is not blocking unknown senders.
- For app verification, enable notifications, open the most recently added device and use Resend Notification.
- Choose Send Verification Code Instead when Amex offers it.
- If the contact method is obsolete or inaccessible, stop requesting codes and use the official recovery or phone-support route.
A replacement phone keeps asking to be added
Adding a device again can occur after changing phones, reinstalling the app, clearing browser data or triggering a security review. Complete the enrollment only from a sign-in you initiated. Then remove the old device from Manage Devices so it cannot continue receiving prompts.
You changed contact details but still see the old information
Amex can use separate records for account contact information, authentication and card fraud alerts. Recheck both Contact Information and Alerts and Card Profile. Sign out and back in if the page is stale, and allow time for a change to propagate. If the old address or number remains the only verification route, contact Amex using the number on the back of your Card.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
You receive an unexpected approval request
Reject the prompt, do not share any code and change the password from the official site. Review saved devices and recent account activity. A caller who asks you to read a code back is not made trustworthy by knowing your name or the last four digits of a Card.
Best Value
- Visa Virtual eGift Cards are designed for online use only. Gift Cards are subject to Terms and Conditions: a.co/5bw3qXJ
- When you access your Visa Virtual eGift Card for the first time, you’ll need to register your name, address, phone number, and email address via activationspot.com. These details should also be used as your billing address for online purchases, as many merchants require address verification for purchase authorization.
- This Visa Virtual eGift Card is non-reloadable. No cash or ATM access. Visa Virtual eGift Cards are emailed active.
- Funds do not expire but your Visa Virtual eGift Card has a ‘valid thru’ date (9 years from date of purchase). If funds remain after this date has passed, please call the Toll Free number found on your Visa Virtual eGift Card for a replacement card. A one-time purchase fee applies at the time of checkout.
- This item is not eligible for refund, resale, or return. Available for sale within the United States only. Not available to residents of Puerto Rico, Hawaii, New Mexico, South Dakota, West Virginia and the US Virgin Islands.
Fraud, phishing and fake American Express sites
If you see an unrecognized transaction, receive a suspicious account message or believe someone accessed your credentials, call American Express using the number on the back of your Card. This route applies whether you are in the United States or traveling overseas.
American Express asks members to report phishing emails, texts and fake AMEX sites to spoof@americanexpress.com. Forward or attach the suspicious material only if it does not expose passwords, full card numbers or verification codes. Delete the message after reporting it and avoid clicking further links.
For Rewards Checking specifically, American Express states that it will never call asking for a verification code. That statement is tied to that product’s guidance; do not generalize it to every American Express product without checking the applicable terms. The safe rule for any account is the same: never disclose an unexpected code to a person who contacts you.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteSafeKey is not the same as account security settings
SafeKey is American Express’ authentication service for online checkout at participating merchants. It can request a code or other confirmation while you are paying, but it is separate from changing your account password, managing saved sign-in devices or editing contact information. The SafeKey and online-safety information explains checkout authentication and password-safety advice; use the account-security menus for sign-in settings.
A maintenance checklist
- Change the password every three to six months according to Amex’s recommendation, and immediately after suspected exposure or reuse.
- Keep the password unique and store it securely if you use a password manager.
- Review Authentication Management and confirm that verification channels are yours.
- Remove lost, stolen, sold or obsolete devices from Manage Devices.
- Keep Amex App notifications enabled on the most recently added device.
- Verify email and phone details under Contact Information and Alerts.
- Check Card Profile so fraud alerts can reach a current address and number.
- Remember that email fraud alerts cannot be disabled, although text delivery may be declined.
- Consider a passkey when your account and device support it, while retaining a recovery route.
- Use only the number on the back of the Card or the official American Express site and app when help is needed.
Official references
- Report Fraud & Protect Your Account | Amex US
- Online Account: View/Edit Contact Information & Alerts
- SafeKey & Online Safety: Card Authentication | Amex US
- How Secure Is My Information with American Express? | Amex CA
American Express summarizes the purpose of two-step verification as follows: “Two-step verification adds a layer of safety.” It also explains passkeys this way: “With passkeys, you can log in using the same Face ID, fingerprint or passcode you use to unlock your device.” These are institutional statements from the official Security Center; availability still depends on your account and device.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
