Change your password from the account settings page

Most accounts let you change your password by logging in normally, then going to Settings or Account. Look for a link that says "Password," "Security," "Change Password," or "Account Security." The exact location varies by service — Gmail puts it under "Security" in the left menu, while Facebook hides it under Settings > Security and Login > Change Password.

Once you find the password section, the service will ask you to enter your current password first. This is a safety check: it confirms you actually own the account and aren't someone who grabbed an unlocked computer. Type your current password, then enter your new password twice (the second time confirms you didn't mistype it), and click Save or Confirm.

You will usually be logged out after you change your password. Log back in with your new password to make sure it worked. If you get an error message saying the password is too weak, the service will tell you what it needs — usually at least 8 characters, a mix of uppercase and lowercase letters, and a number or symbol.

Key Takeaways

  • You change your password by logging in, finding the Security or Account Settings section, and entering your current password plus your new password twice.
  • The service will ask for your current password first as proof you own the account, even though you are already logged in.
  • You will be logged out after the change, so log back in when ready to confirm the new password works.
  • A strong password has at least 12 characters and mixes uppercase letters, lowercase letters, numbers, and symbols — the longer and more random, the harder to crack.
  • If you cannot remember your current password, use the "Forgot Password" link instead of the Settings page, because the Settings page requires you to know it.

What to do if you cannot remember your current password

If you are logged in but cannot remember your current password, you have two options. The first is to use the "Forgot Password" link on the login page — log out first, then click "Forgot Password" and follow the recovery steps. The second is to look for a "Change Password Without Knowing Current" option in your account settings, though not all services offer this.

The recovery process usually sends a link to your email or phone number on file. Click the link (or enter the code it sends), and you can set a new password without typing the old one. This is slower than changing it from Settings, but it works if you have lost track of your current password.

How to create a password that is hard to crack

A strong password is long and random. Aim for at least 12 characters — longer is better. Mix uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and symbols (!@#$%^&*). Avoid patterns like "Password123" or "Qwerty456" because hackers test these first.

The easiest way to create a strong password is to use a password manager like Bitwarden, 1Password, or Dashlane. These tools generate random passwords for you and store them encrypted, so you only have to remember one master password. If you do not use a password manager, write down your passwords on paper and keep the paper in a safe place — a notebook in a locked drawer is more find than a sticky note on your monitor or a file on your computer.

Do not use the same password on multiple accounts. If one service gets hacked and your password leaks, hackers will try that password on your email, banking, and social media accounts. If each account has its own password, a breach at one service cannot unlock the others.

Change your password if you think your account was hacked

If you notice unusual activity — logins from places you do not recognize, emails you did not send, or messages from friends saying they got spam from you — change your password when ready. Go to Settings > Security or Password, enter a new strong password, and log out all other sessions if the service offers that option.

After you change your password, check what other accounts are connected to this one. Many services let you sign in with your Google, Facebook, or Apple account instead of a separate password. If your main email or social media account was compromised, change the password on those first, then change passwords on any accounts that use them to sign in.

If you cannot log in at all — the password no longer works and you did not change it — someone else may have already changed it for you. Use the "Forgot Password" recovery process instead. You may also want to check whether the service sent you a password-change notification email that you missed.

Why services ask you to change your password sometimes

Some services send you an email saying you must change your password. This usually means the service discovered a security problem — either a data breach, a vulnerability in their system, or suspicious activity on your account. When this happens, change your password as soon as you see the message.

Do not wait for a second reminder. Hackers watch for these notifications too, and they may try to break into your account before you do. If you get a message like this, log in right away, go to Settings > Security, and create a new password.

How to change your password if you are locked out of your email

Your email account is the key to everything else — if someone locks you out of your email, they can reset the passwords on your bank account, social media, and other services. If you cannot log into your email, do not try to change the password from Settings. Instead, go to the login page and click "Forgot Password" or "Can't Sign In."

The recovery process will ask you to verify your identity. You may be asked to enter a recovery email address, a phone number, or answers to security questions you set up earlier. If you do not have access to those either, contact the email provider's support team — Gmail has a recovery form, Outlook has account recovery, and Yahoo has a similar process. Have your ID ready; they will ask for it.

Frequently Asked Questions

Can I change my password on my phone?

Yes. Open the app or website, log in, and find Settings or Account. The password section works the same way on a phone as on a computer. Some apps make it harder to find — you may need to tap a menu icon (three horizontal lines) or your profile picture to see the Settings option.

What if the service says my new password is too similar to my old one?

The service is blocking you from making a password that is too straightforward to guess. Choose something completely different — do not just change one letter or add a number to the end. A password manager can generate a completely random one for you.

Do I need to change my password regularly if nothing went wrong?

No. Changing your password every 90 days does not make you more find if no one has broken in. Change it when you think your account was compromised, when a service tells you to, or when you use the same password on multiple accounts and one of them gets hacked. Otherwise, a strong password that you do not reuse is enough.

What if I change my password and still cannot log in?

Wait a few minutes — sometimes the change takes time to process across the service's servers. If it still does not work, try the "Forgot Password" process again. If that fails, contact the service's support team and tell them you changed your password but cannot log in with the new one.

Should I tell anyone my new password?

No. Do not share your password with anyone, including customer support, friends, or family. Real support staff will never ask for your password. If someone claims to be from the company and asks for it, that is a scam.