Reference

Password Help for Your Sona Bit Account

We've built password recovery around your mobile number and wallet verification so you can get back into your account fast. Reset through SMS code or bKash, Nagad, Rocket confirmation—your choice.

Mobile ResetWallet VerificationSMS CodeAccount RecoveryInstant Access
Sona Bit Password Help for Your Sona Bit Account
Sona Bit How Password Reset Works on Sona Bit

How Password Reset Works on Sona Bit

Your account password sits behind two recovery paths. The first runs through your registered mobile number—we send an SMS code to the number you signed up with, you enter it on the reset screen, then set your new password. The second option verifies your identity through your most recent deposit wallet. If you funded your account with bKash, Nagad or Rocket in

the past seven days, you can confirm your account ownership by showing that wallet transaction in our support chat. Once verified, we unlock the password field and you're back in. Both paths take under three minutes when your phone and wallet are ready. We don't email password links and we don't store your old password in plain text—only the recovery code or

wallet proof gets you through.

SECURITY LAYER

How We Protect Your Password Reset

Two-Factor Mobile Check

Every password reset requires the SMS code sent to your registered mobile number or wallet proof from your last deposit. We don't accept email-only resets and we don't allow password changes without one of these two factors confirmed first.

Encrypted Password Storage

Your password lives in our database as a hashed string—we can't read it and our support team can't see it. When you reset, the old hash gets replaced with the new one.

Session Logout After Reset

The moment you complete a password reset, all your existing login sessions across devices are closed. You'll need to log in again with the new password on your phone, tablet or desktop—this stops anyone using an old session to access…

Rate Limit on Reset Attempts

We cap password reset requests at three tries per hour from the same IP address or mobile number. If someone tries to spam reset codes to your number, the system blocks further attempts and flags the account for our security…

HELP CHANNELS

Where to Get Password Help

Team online

Live Chat Reset

Open the chat bubble on any Sona Bit page and tell the agent you need password help. They'll ask for your registered mobile number and your most recent deposit wallet to verify your account, then send you the reset code or unlock the password field directly.

SMS Code Request

Click 'Forgot Password' on the login screen, enter your mobile number, and we'll text you a six-digit code. Enter that code on the next screen and set your new password. The code expires in ten minutes, so use it right away.

Wallet Verification Path

If your mobile number changed or you can't receive SMS, show your last bKash, Nagad or Rocket deposit screenshot to our support team. They'll match the transaction ID to your account and let you reset your password through the verified wallet method.

Common Password Help Terms

What is an SMS reset code?

An SMS reset code is a six-digit number we text to your registered mobile when you click 'Forgot Password.' Enter it on the reset screen within ten minutes to unlock the password field and set a new one.

What does wallet verification mean?

Wallet verification is when you prove account ownership by showing your last bKash, Nagad or Rocket deposit screenshot to our support team. They match the transaction ID to your account and let you reset your password without SMS.

What is a hashed password?

A hashed password is your password converted into a scrambled string that can't be reversed. We store only the hash, not your actual password, so even our team can't read what you typed when you signed up.

What does session logout mean?

Session logout happens automatically when you reset your password—all devices where you're currently logged in get signed out at once. You'll need to log in again everywhere with the new password to resume playing.

What is a rate limit on resets?

A rate limit on resets caps how many times you can request a password reset code in one hour, usually three attempts. It stops someone from spamming your number with codes and protects your account from brute-force attacks.

What is two-factor account recovery?

Two-factor account recovery means you need two pieces of proof to reset your password: your registered mobile number plus the SMS code, or your mobile number plus your recent wallet deposit proof. One factor alone won't unlock the reset.

Password Help Questions from Bangladesh Players

Click 'Forgot Password' on the login screen, enter your registered mobile number, and we'll text you a six-digit code. Type that code on the reset page and set your new password. The code expires in ten minutes.

Open live chat and tell our support team your old mobile number and your last deposit wallet—bKash, Nagad or Rocket. Show them the transaction screenshot and they'll verify your account, then let you reset your password through wallet proof instead of SMS.

We don't offer email-based password resets. Your account recovery runs through SMS code to your registered mobile or wallet verification through your last bKash, Nagad or Rocket deposit. Email links aren't part of our security flow.

When you reset your password, all active login sessions close automatically across every device for security. You'll need to log in again with the new password on your phone, tablet or desktop to get back into your account.

You can request a reset code three times per hour from the same mobile number or IP address. After three tries, the system blocks further attempts for sixty minutes to stop spam and protect your account from unauthorized reset requests.

Don't use the code—someone else may have tried to access your account by mistake or on purpose. Open live chat right away and tell our support team so they can review the reset attempt and secure your account if needed.
Reference

Password Help Bangladesh

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.