The basic steps for changing your password

The exact steps depend on which email service you use, but the process is similar across Gmail, Outlook, Yahoo, and most others. You log into your account, find the security or account settings section, locate the password change option, enter your current password, type your new password twice, and confirm the change. Most services send you a confirmation email after the change goes through.

The key difference from resetting a forgotten password is that you already know your current password. You are not using a recovery email or phone number to prove who you are — you are proving it by typing the password you use right now. This makes the process faster and means you stay in control the whole time.

Key Takeaways

  • You can change your password anytime you remember it by going to your account settings, not by using a recovery method.
  • Gmail, Outlook, Yahoo, and most other services ask you to enter your current password before letting you set a new one.
  • A strong new password should be at least 12 characters long and mix uppercase letters, numbers, and symbols — not words from a dictionary.
  • After you change your password, check your active sessions or connected devices to sign out of places you no longer use.
  • If you change your password because you think someone else accessed your account, also check your recovery email and phone number to make sure they still belong to you.

How to change your password in Gmail

Go to myaccount.google.com in your browser and sign in if you are not already. On the left side, click Security. Scroll down to the section labeled How you sign in to Google and click Password. Google will ask you to sign in again to confirm it is really you — enter your current password. Then type your new password in the first box, type it again in the second box to confirm you did not make a typo, and click Change Password.

Gmail will show you a message saying your password has been changed. You will also receive a confirmation email at your Gmail address within a few minutes. If you do not see that email, check your spam folder — sometimes the confirmation lands there by mistake.

How to change your password in Outlook or Microsoft

Go to account.microsoft.com and sign in. Click Security at the top. Under the section Password and security info, click Change my password. Enter your current password, then type your new password twice, and click Next. Microsoft will confirm the change and may ask you to sign in again on your devices.

If you use Outlook.com as your email address, this same process works — the password change applies to your entire Microsoft account, which includes Outlook, OneDrive, and other Microsoft services you may have connected.

How to change your password in Yahoo Mail

Go to login.yahoo.com and sign in. Click your account icon in the top right corner and select Account info. Click Security and privacy on the left side. Under Password, click Change password. Enter your current password, then type your new password twice, and click Change password.

Yahoo will send you a confirmation email. Like Gmail, this confirmation sometimes lands in spam, so check there if you do not see it in your inbox right away.

What makes a strong password you can actually remember

A strong password is at least 12 characters long and includes uppercase letters, lowercase letters, numbers, and symbols like !, @, #, or $. Avoid passwords based on dictionary words, names of people you know, birthdays, or sequences like 1234. A password like BlueMoon#2024River is stronger than password123, even though both have numbers.

If you struggle to remember a long password, use a phrase that means something to you and turn it into a code. For example, "My dog ate three socks in 2019" could become MdAt3sI2019! — the first letter of each word, plus numbers and a symbol. Write this method down somewhere safe (not in a note on your computer), and you can recreate the password if you forget it.

A password manager like Bitwarden, 1Password, or Dashlane can store strong passwords for you so you only have to remember one master password. This removes the burden of memorizing a different strong password for each account.

What to do after you change your password

After you change your password, take two more steps. First, check your active sessions or connected devices. In Gmail, this is under Security > Your devices. In Outlook, go to Security and privacy > Recent activity. Look for any devices or locations you do not recognize, and click to sign them out. This removes access from any place that was using your old password.

Second, if you changed your password because you suspect someone else accessed your account, check your recovery email and phone number. In Gmail, this is under Security > How you can recover your account. In Outlook, go to Security and privacy > Password and security info. Make sure the recovery email still belongs to you and the phone number is still yours. If either one has been changed without your permission, change it back when ready — that is how someone could lock you out of your own account later.

When you should change your password

Change your password if you have used the same one for more than a year, if you shared it with someone who no longer needs access, or if you used it on a website that was hacked. You do not need to change it every month just to change it — security experts no longer recommend that practice because people tend to make weaker passwords when forced to change them frequently.

Change your password when ready if you see sign-in activity you do not recognize, if someone asks you for it, if you typed it into a website that looked like your email service but was not, or if you used it on a public computer. These are signs that someone else may have seen it.

Frequently Asked Questions

Will changing my password sign me out everywhere?

Not automatically. You will stay signed in on your phone, computer, and other devices until you manually sign them out or until they try to refresh your session. This is why checking your active devices after a password change is important — you can remove access from places you no longer use or do not recognize.

What if I forget my new password right after I change it?

Use your recovery email or phone number to reset it. Go to the sign-in page, click "Can't access your account" or "Forgot password", and follow the steps to prove who you are. This is why keeping your recovery email and phone number current matters — they are your way back in if you lock yourself out.

Can I change my password on my phone?

Yes. Open Gmail, Outlook, or Yahoo in your phone's browser or app, go to settings, and follow the same steps as on a computer. The screens look slightly different on a phone, but the process is the same. You can also change it on a computer and the change will take effect on your phone the next time you sign in.

Do I need to change my password if I change my recovery email?

No, changing your recovery email does not require a password change. However, if someone else changed your recovery email without your permission, change your password when ready — that is a sign your account may have been compromised.

What if my email service does not have a password change option where I expect it?

Look for a link labeled "Security", "Account settings", "Privacy", or "Password and sign-in". If you cannot find it, search the service's help center for "change password" — most services have a support article that walks you through the exact steps for your version of their site.