You can change your Microsoft password in about five minutes through your account settings

Go to account.microsoft.com in any web browser and sign in with your current password. Once you're logged in, look for "Security" in the left menu and select it. Click "Change password" — it's usually near the top of the security options. Microsoft will ask you to enter your current password once more, then type your new password twice to confirm it matches. After you click "Next," the change takes effect when ready.

You'll stay signed in on that device, but you may need to sign in again on your phone, tablet, or other computers where you use Microsoft services. This is normal and a sign the change worked. If you use your Microsoft account for Outlook, OneDrive, Xbox, or Windows itself, those services will ask for your new password the next time you open them.

Key Takeaways

  • Visit account.microsoft.com, sign in, go to Security, and click "Change password" to update your password in minutes.
  • Your new password takes effect right away, but you'll need to sign in again on any other devices you use.
  • A strong password is at least 12 characters long and mixes uppercase letters, lowercase letters, numbers, and symbols.
  • If you forget your password before changing it, use the "Can't access your account" link on the sign-in page to recover it.
  • Changing your password does not affect saved passwords in your browser — you may want to update those separately.

What makes a password strong enough to protect your account

Microsoft requires your new password to be at least 8 characters, but longer is better. A password with 12 or more characters is much harder to guess or crack than a short one. Mix in uppercase letters, lowercase letters, numbers, and symbols (like ! @ # $ %) to make it even stronger.

Avoid passwords based on your name, birthdate, or common words. Don't reuse a password from another account — if one site gets hacked, attackers will try that same password everywhere else. A password manager like Bitwarden or 1Password can generate and store a unique, strong password for you so you don't have to remember it.

When you should change your password right away

Change your Microsoft password when ready if you think someone else knows it, if you've used it on a website that was hacked, or if you shared it with someone and no longer trust them. You should also change it if you've been using the same password for more than a year, or if you notice sign-in activity from places you don't recognize in your account security settings.

If you suspect someone has already accessed your account, change your password first, then review your recent activity and connected apps. Go to "Security" and look at "Recent activity" to see where and when your account was used. If you see logins from unfamiliar cities or devices, you can sign out of those sessions by clicking "Review all activity."

Signing back in on your other devices after you change your password

After you change your password, your phone, tablet, and other computers will ask for the new one the next time you try to use a Microsoft service. On Windows, you may be prompted to sign in again when you restart your computer. On an iPhone or Android phone, open the Microsoft Authenticator app or the Outlook app and update your password there.

If a device keeps rejecting your new password, make sure you're typing it correctly — passwords are case-sensitive, meaning capital letters matter. If you're still stuck, sign out completely from that device and sign back in from scratch. This usually fixes the problem faster than trying to update the password in place.

If you can't remember your current password

You don't need your old password to set a new one. On the Microsoft sign-in page at login.live.com, click "Can't access your account?" below the password field. Microsoft will ask you to enter your email address or phone number, then send you a code to verify your identity.

You can receive the code by email or text message — choose whichever you have access to right now. Enter the code on the next screen, and Microsoft will let you set a new password without needing the old one. This recovery process usually takes a few minutes and works even if you haven't signed in for months.

Passwords saved in your browser are separate from your Microsoft account password

If you've told Chrome, Edge, Firefox, or Safari to remember your Microsoft password, changing your account password doesn't automatically update the saved one in your browser. The next time you visit a Microsoft site, your browser will try to fill in the old password, which won't work anymore.

To update a saved password in most browsers, go to Settings or Preferences, find "Passwords" or "Saved passwords," search for Microsoft or Outlook, and delete the old entry. The next time you sign in with your new password, your browser will ask if you want to save it. This keeps your browser from offering an outdated password that will fail.

Using two-factor authentication to protect your account after you change your password

Changing your password is a good step, but adding two-factor authentication makes your account much harder to break into. With two-factor authentication turned on, anyone trying to sign in needs both your password and a code from your phone — even if they somehow learn your password, they can't get in without that second code.

To turn on two-factor authentication, go to account.microsoft.com, select "Security," and click "Advanced security options." Choose "Two-step verification" and follow the steps to add your phone number or read the Microsoft Authenticator app. You'll get a code by text message or app notification every time someone tries to sign in from a new device.

Frequently Asked Questions

How often should I change my Microsoft password?

There's no magic number, but changing it once a year is reasonable if you're the only one using your account and you haven't seen suspicious activity. If you think someone else knows your password, or if you reused it on a site that was hacked, change it right away. Two-factor authentication matters more than frequent password changes.

Will changing my password delete my files or emails?

No. Your files in OneDrive, your Outlook emails, and everything else in your account stays exactly where it is. Changing your password only affects how you sign in — it doesn't touch any of your data.

Can I change my password on my phone instead of a computer?

Yes. Open any web browser on your phone, go to account.microsoft.com, and follow the same steps. The process is identical on mobile. You can also change it through the Microsoft Authenticator app by going to Settings and selecting "Change password."

What if Microsoft says my new password is too weak?

Microsoft will reject passwords that are too short or don't mix character types. Try a password that's at least 12 characters long and includes uppercase letters, lowercase letters, numbers, and a symbol. Avoid dictionary words or patterns like "Password123" — those are straightforward to guess.

Do I need to change my password if I only use Microsoft for Xbox or OneDrive?

Your Microsoft account password protects everything connected to it — Xbox, OneDrive, Outlook, and Windows all use the same login. If you change your Microsoft password, you'll need to sign in again on all those services, but you only have to change the password once in one place.