SBI usernames and passwords are created inside SBI's own internet banking portal at onlinesbi.com or on the YONO SBI app; the bank does not let any external tool generate credentials on its behalf, but a free Username Generator makes it far easier to settle on a memorable, unique handle before you begin the registration process. When you open the new user registration page, SBI prompts you for a username of your choice, a password you create twice, a transaction password, and a profile password, then ties all of those values to the account number, CIF number, branch code, and registered mobile number you supplied during account opening. This article walks through what those fields really mean, how to pick a username and password that will pass SBI's rules the first time, and how a Username Generator fits into the workflow so you are not stuck staring at a blank text box on the registration screen.
What SBI Actually Means by "Username and Password"
SBI's internet banking package is layered, and the words username and password map to several distinct credentials rather than a single pair. The first password you set during new user registration is the login password, used every time you open net banking in a browser. A second value called the profile password protects personal details, nominee information, and contact updates inside your profile. A third value, the transaction password, gates every funds transfer, bill payment, and beneficiary addition. On top of those, SBI also issues a one-time password sent by SMS to your registered mobile number for high-value transactions.
The username you pick at registration is permanent for the life of that CIF. You cannot change your SBI internet banking username through any menu — the only supported recovery if you forget it is to re-register with the same account details, which SBI will only allow if your old username has not been used to log in for a long stretch. This is why taking a few minutes to choose a strong, memorable handle matters far more than people expect.
The Rules SBI Enforces on Username and Password
SBI's login form silently rejects entries that do not match its policy, so knowing the rules in advance saves you a frustrating trial-and-error loop. The username field accepts letters, digits, dots, and underscores; spaces and most special characters are stripped. The login password must be 8 to 20 characters long and must contain at least one uppercase letter, one lowercase letter, one digit, and a symbol from the set SBI accepts — characters such as #, @, $, %, &, and ! are fine, while commas, quotes, and backslashes are not. The profile and transaction passwords follow the same character rules as the login password but are typed separately and never reused.
| Credential | Where It Is Set | Where It Is Used | Length Rule |
|---|---|---|---|
| Username | First-time registration form | Login screen header | Short, alphanumeric with . or _ |
| Login password | First-time registration form | Opening net banking | 8–20 chars, mixed case + digit + symbol |
| Profile password | First-time registration form | Editing personal details | 8–20 chars, same composition rules |
| Transaction password | First-time registration form | Funds transfer and bill pay | 8–20 chars, same composition rules |
Brainstorming a Strong Username Before You Register
The hardest part of the SBI registration screen is usually the username field, because the value you type will be permanent and must be unique on SBI's server. A good SBI username is easy to type, easy to remember, and does not leak personal data such as your date of birth, phone number, or account number. The Username Generator on Lizely is built for exactly this kind of brainstorm: it pulls from a clean word bank, lets you choose a style such as soft, brandable, or edgy, and supports custom casing plus separators like dots, dashes, or underscores. If you are worried about collisions, switch on the "Add a number" toggle and pick a digit length so each candidate carries a numeric tail.
Once you have a shortlist, strip out anything that includes your real name, initials, or year of birth, then test the surviving options by trying to type them from memory once or twice without looking. The candidate that survives that quick recall test is the one to paste into the SBI registration form.
Generate Username and Password in SBI: The Full Walkthrough
- Open the Username Generator in a separate tab and pick a style that matches the tone you want — soft for personal banking, brandable if you also plan to reuse the handle on social media.
- Set the count to around ten so you have a useful shortlist, choose your preferred casing and separator, then turn on Add a number with a digit length of two or three for extra uniqueness.
- Press Generate, scan the list for entries that are easy to read aloud and quick to type, and use the Copy button on the best candidate so it lands in your clipboard.
- Open onlinesbi.com in another tab and click the "New User Registration" link on the login page, then enter your account number, CIF number, branch code, and the OTP that SBI sends to your registered mobile number.
- On the registration screen, paste the username you copied from the generator into the username field, then create a fresh login password of 8 to 20 characters mixing upper and lower case letters, a digit, and a symbol such as #, @, or !.
- Create a separate profile password and a separate transaction password using the same composition rules, confirm all three passwords in their second fields, and submit the form.
- Write the username and all three passwords down on paper and store the paper somewhere offline; do not screenshot them, do not email them to yourself, and do not save them in a notes app that syncs to the cloud.
- Log out, then log back in once with the new username and login password to confirm the values were accepted before you close the browser.
For more ideas on choosing a handle you will still remember a year from now, the guide How to Generate Username Ideas You Will Actually Use walks through extra filters you can apply to any generator output. If you also want a quick read on the password half of the pair, Generate a Unique Username and Password in Minutes lines up the two decisions side by side so you do not pick a clever username that you then protect with a weak password.
Building a Password That SBI Will Accept on the First Try
The password half of the SBI form is where most first-time users fail and have to re-enter values three or four times in a row, because every field has its own composition check that runs the moment you tab out of the box. A simple recipe that satisfies SBI's policy and stays memorable is a four-word phrase compressed into a single string with a symbol separator and a trailing digit, for example BlueRiver#42Tide. That string is 16 characters long, mixes upper and lower case, carries the # symbol that SBI accepts, and ends in two digits rather than a guessable run such as 1234.
When you build a password this way, avoid three traps. The first is dictionary words glued together with no separator, which a leaked database can crack with a hybrid attack. The second is reusing the username or any obvious personal anchor such as your birth year; SBI will not warn you about this, but it weakens the value considerably. The third is keyboard walks like qwerty or asdf, which feel random but are among the first patterns a cracker will try. Stick with the phrase-plus-symbol-plus-digit pattern and you will sail through the SBI check.
Common Mistakes That Lock People Out of SBI
Most lockouts during SBI registration are not bugs in the bank's system — they are typing mistakes that could have been caught with a one-minute preview. The single most common mistake is reusing the same string as the username and the login password, which SBI allows at the form level but which leaves the account trivially easy to compromise if either value leaks. A close second is choosing a password that ends in a digit run such as 1234 or 2024; the registration form will accept it, but a leaked password database will crack that tail in seconds.
Another frequent mistake is using the registered mobile number as part of the username. That looks convenient in the moment, but it gives anyone who sees your SIM card a head start on a phishing attempt. Finally, many users store all three passwords in the browser's built-in password manager and then lose access when they reinstall the operating system. If you prefer a digital store, use a dedicated offline password vault; if you prefer paper, keep the sheet somewhere dry and away from the laptop you use for banking.
YONO SBI Versus the Browser Portal: Where You Set the Same Credentials
The same username and password pair works on both the browser portal at onlinesbi.com and the YONO SBI mobile app, so you do not get to register separately for each channel. YONO SBI is a super-app wrapper around internet banking that adds investments, loans, and a marketplace on top of the standard dashboard. When you log in to YONO for the first time on a new phone, it prompts for the same username and login password you set on the browser, then asks for an MPIN you create inside YONO itself for quick biometric or numeric access.
For users who only ever bank on a phone, the practical workflow is to register on the browser first to set the username, login password, profile password, and transaction password, then install YONO and log in with those exact values. Trying to register inside YONO without first completing the browser flow usually leads to a dead end, because YONO assumes the underlying internet banking credentials already exist. The MPIN inside YONO is a local convenience layer and is not the same as any of the three passwords you set on the browser form.
What to Do If You Forget the Username or Password Later
If you forget your SBI username, the bank does not expose a "what is my username" lookup on the login page. The supported recovery is to revisit the new user registration flow with the same account number, CIF, branch code, and mobile number; SBI will only let you re-register when the old username has been inactive for an extended period, which is why reusing the original username is risky and choosing a fresh one is often the only realistic outcome. If you forget the login password but still remember the username, use the "Forgot Password" link on the login page and follow the OTP-driven reset flow. If you forget the profile or transaction password, you can reset them after logging in, but only if you still know the login password — which is exactly why the login password deserves the strongest value of the three.
Security Habits That Protect the Credentials You Just Created
Once the registration succeeds, treat the SBI login screen the way you treat an ATM keypad: cover it from shoulder-surfers, never type the password on a shared computer, and never paste it into a chat or email even if the request looks like it came from SBI. The bank will never ask for your login password or transaction password over the phone, by SMS, or by email, and the only password SBI itself prompts for outside the login and transaction screens is the profile password, which gates changes to your personal details. Any other request is a phishing attempt, regardless of the sender's name.
It is also worth rotating the transaction password every few months, since that is the credential that actually moves money. The login password can stay steady for longer because it only opens the dashboard, but the transaction password should be treated like the PIN on a debit card and changed on a schedule. If you ever suspect that a device you used for SBI has been compromised, reset all three passwords from a trusted machine before you log in from the suspicious one again.
Quick Reference: SBI Credential Rules at a Glance
| Rule Area | Username | Login Password | Profile Password | Transaction Password |
|---|---|---|---|---|
| Min length | About 4 characters | 8 characters | 8 characters | 8 characters |
| Max length | About 20 characters | 20 characters | 20 characters | 20 characters |
| Uppercase required | Optional | Yes | Yes | Yes |
| Digit required | Optional | Yes | Yes | Yes |
| Symbol required | Not used | Yes (limited set) | Yes (limited set) | Yes (limited set) |
| Can it be changed later? | No (re-register only) | Yes, via Forgot Password | Yes, from profile menu | Yes, from profile menu |
Keeping that table open in a second tab while you fill in the SBI form turns a five-minute registration into a one-minute registration, because you can match each field to its rule without guessing. Once the form submits successfully, store the credentials the way you would store a spare house key — somewhere offline, somewhere private, and somewhere you will remember to look when you actually need them.
Related reading: How to Create a vCard File That Imports Cleanly Anywhere.