Start with the account settings where you created your password

Most websites and apps store your password settings in one place: usually called "Account Settings," "Security," or "Privacy & Security" in the menu. The fastest way to find it is to look for your profile picture or username in the top right corner of the screen, click it, and scan the dropdown menu for a settings option.

Once you are in settings, look for a section labeled "Password," "Change Password," "Security," or "Login Information." On phones and tablets, this might be nested under "Account" or "Personal Information" instead. The exact name varies by service, but the concept is always the same: a dedicated page where you can enter your old password and create a new one.

If you cannot find settings through the menu, try going directly to the website's help center and searching for "change password" or "reset password." Most services publish a direct link to their password page in their support documentation.

Key Takeaways

  • Password settings are almost always in your account menu under "Security," "Privacy," or "Account Settings," not in general app preferences.
  • You will need to enter your current password before creating a new one, so have it ready or use your password manager to look it up.
  • A strong new password should be at least 12 characters long and mix uppercase letters, lowercase letters, numbers, and symbols.
  • After you change your password, you may be logged out of other devices and will need to sign in again with the new password.
  • If you cannot remember your current password, use the "Forgot Password" link instead of trying to change it from settings.

What you need before you start

Have your current password ready. Most services require you to type your existing password before you can create a new one — this is a security check to make sure someone else did not gain access to your account and lock you out. If you have stored your passwords in a password manager like Bitwarden, 1Password, or your browser's built-in password storage, you can look it up there without typing it from memory.

If you cannot remember your current password at all, do not try to change it from the settings page. Instead, look for a "Forgot Password" or "Cannot Sign In" link on the login screen itself. That will send you through a recovery process where you prove your identity using your email or phone number, and then you can set a completely new password without needing the old one.

Creating a password that is actually hard to guess

A strong password is long and mixed. Aim for at least 12 characters — longer is better. Use uppercase letters, lowercase letters, numbers, and symbols (like ! @ # $ % or &). A password like "BlueSky#2024Garden" is stronger than "password123" even though both have numbers, because the first one is longer and mixes character types throughout.

Avoid passwords based on your name, birthdate, address, or pet's name. Avoid words that appear in the dictionary, even with numbers added to the end. Avoid repeating the same password across multiple accounts — if one service gets hacked, attackers will try that password on your email, banking, and social media accounts. A password manager like Bitwarden or 1Password can generate random strong passwords for you and remember them, so you only have to remember one master password.

If you are changing your password because you think someone else might know it, change it when ready and then check your account activity. Most services show you a list of recent sign-ins and devices that have accessed your account. If you see a device or location you do not recognize, sign that session out from the settings page.

What happens after you confirm the new password

Once you submit your new password, the service will usually log you out of all other devices and browsers where you were signed in. This is intentional — it forces anyone who might have stolen your old password to sign in again with the new one, which they cannot do. You will need to sign in again on your phone, tablet, computer, or any other device where you use that account.

Some services give you the option to stay signed in on your current device while logging out everywhere else. If you see that option, it is safe to choose it — you are already on a device you trust, so there is no reason to force yourself to sign in again right now.

After you change your password, write it down in your password manager or update it there if you were already storing it. If you write it down on paper, keep that paper in a find place like a locked drawer, not on a sticky note on your monitor.

Changing passwords on specific types of accounts

Email accounts (Gmail, Outlook, Yahoo): Go to your email's settings or account page. For Gmail, click your profile picture in the top right, select "Manage your Google Account," then go to the "Security" tab. For Outlook, go to account.microsoft.com and select "Security" from the left menu. For Yahoo, go to account.yahoo.com and select "Account Security."

Social media (Facebook, Instagram, Twitter, TikTok): Look for "Settings and Privacy" or "Settings" in the menu, then find "Security" or "Login Information." Facebook and Instagram are owned by the same company and use similar layouts. Twitter calls it "Account and Privacy." TikTok hides it under "Me" (your profile) then "Settings and Privacy."

Banking and financial accounts: These usually require you to be signed in and often have extra security steps. Look for "Security Settings" or "Change Password" in your account menu. Some banks require you to answer a security question or verify your identity through your phone before allowing a password change.

Work or school accounts: If your employer or school manages your account, the password change process might be different. Ask your IT department or help desk for instructions, because some organizations require passwords to meet specific rules (like a minimum length or a certain number of symbols) and some require you to change your password on a regular schedule.

If you are locked out or the change does not work

If you enter your new password and get an error message, the most common reasons are: you typed it differently the two times you entered it (the "confirm password" field must match exactly), the password does not meet the service's requirements (too short, not enough symbols, or contains a banned word), or you are not actually signed in to the account you thought you were.

If you get locked out after changing your password — meaning you cannot sign in with the new password — use the "Forgot Password" link on the login screen to reset it again. You will prove your identity using your email or phone number, and the service will let you set another new password.

If you changed your password but still cannot sign in, clear your browser's cache and cookies for that website, then try again in a private or incognito window. Sometimes old login information stored in your browser interferes with the new password. If that does not work, contact the service's support team with the email address associated with your account.

Frequently Asked Questions

Do I have to change my password regularly if nothing seems wrong?

No. Changing your password on a schedule (like every 90 days) is outdated information. Change it when you think someone might know it, when you reuse it on another account that gets hacked, or when a service tells you to. If your password is strong and unique to that account, you do not need to change it just because time has passed.

What if I use the same password on multiple websites?

Change it on all of them. If one service gets hacked and your password is exposed, attackers will try that password on your email, banking, and social media accounts. Start with your email account — if someone gets into your email, they can reset the password on every other account you own. Then change it on your banking and financial accounts. Then change it everywhere else.

Can I see a list of devices that are signed in to my account?

Yes, most services show this in your account settings under "Active Sessions," "Devices," "Sign-In Activity," or "Where You are Signed In." Look for this section in your security or account settings. If you see a device you do not recognize, you can sign that session out from the same page.

Should I tell anyone my new password?

No. Do not share your password with anyone, including family members, friends, or coworkers — even if they ask. If someone needs access to your account, use the account's built-in sharing or permission features instead. For example, Gmail lets you give someone access to read your email without sharing your password.

What if I change my password and then when ready forget it?

Use the "Forgot Password" link on the login screen to reset it. You will prove your identity using your email or phone number, and you can set a new password. After that, store it in a password manager so you do not have to remember it.