Open Gmail and go to your account settings

Sign into Gmail at gmail.com using your current password. Once you're logged in, look at the top right corner of the screen where you'll see your profile picture or initial in a circle. Click on it.

A menu will drop down with several options. Click on "Manage your Google Account" — this takes you to the control panel for everything connected to your Gmail address, not just email.

Navigate to the Security tab

At the top of the Google Account page, you'll see several tabs: Overview, Personal info, Security, and others. Click on "Security."

The Security tab shows all the ways someone could access your account and all the protections you've set up. Scroll down until you see a section called "How you sign in to Google" or "Password." This is where you change it.

Key Takeaways

  • You must be signed into Gmail before you can change your password — Google won't let you change it from the login screen.
  • The password change option lives in the Security tab of your Google Account settings, not in Gmail's own settings menu.
  • Google will ask you to type your current password once more before letting you set a new one, as a security check.
  • A strong password has at least 12 characters and mixes uppercase letters, lowercase letters, numbers, and symbols like ! or @.
  • After you change your password, you'll be signed out on all other devices and will need to sign back in with the new password.

Click "Password" and enter your current password again

Click on the "Password" option. Google will ask you to type your current password one more time. This is a security step — even though you're already signed in, Google wants to make sure it's really you making this change and not someone who grabbed your computer for a moment.

Type your current password and click "Next." If you get an error message, make sure Caps Lock is off and that you're typing the exact password you use to sign in.

Create and confirm your new password

You'll now see two blank fields: one for your new password and one to confirm it. Type your new password in the first field. As you type, Google will show you a strength meter — green means strong, yellow means medium, red means weak.

A strong password is at least 12 characters long and includes a mix of uppercase letters, lowercase letters, numbers, and symbols. For example: "BlueMountain#2024!" is stronger than "password123." Avoid using words from the dictionary or information someone might know about you, like your birth year or pet's name.

Type the same new password again in the "Confirm password" field. This catches typos before you lock yourself out. Click "Change Password" when both fields match.

You'll be signed out everywhere

After you change your password, Google signs you out of Gmail on every device and browser where you were logged in. This is intentional — it's a security feature that makes sure only you can access your account with the new password.

On your phone, computer, tablet, or anywhere else you use Gmail, you'll need to sign back in. Open Gmail or the Gmail app, type your email address, and when it asks for your password, use the new one you just created. This usually takes less than a minute per device.

Save your new password somewhere safe

Write down or save your new password in a place only you can access. Many people use a password manager — a program that stores passwords encrypted so you only have to remember one master password. Popular options include Bitwarden, 1Password, and Dashlane, though your browser (Chrome, Firefox, Safari) can also store passwords if you trust it.

If you write it down on paper, keep it in a locked drawer or safe, not on a sticky note on your monitor. If you use a password manager, make sure you remember the master password — if you forget it, you may not be able to recover your stored passwords.

What to do if you forget your new password right after changing it

If you change your password and then when ready forget it before signing back in on another device, you can still recover access. Go to the Gmail login page and click "Forgot password?" Follow the recovery steps, which usually involve confirming your phone number or recovery email address. Google will let you set a new password without knowing the old one.

This is why having a recovery phone number and backup email address on file matters — they're your way back in if you lock yourself out.

Frequently Asked Questions

Do I have to change my password if I haven't been hacked?

No. Changing your password regularly is a good habit, but it's not required. Change it if you think someone knows it, if you used the same password on another website that was breached, or if you haven't changed it in several years. Otherwise, a strong password that only you know is enough.

Will changing my password affect my other Google services like Drive or YouTube?

Yes and no. Your Gmail password and your Google Account password are the same thing — they control access to Gmail, Drive, YouTube, Google Photos, and everything else tied to that Google Account. When you change it, you'll need to sign back in everywhere. But you only have to change the password once; it updates across all services automatically.

What if I'm trying to change my password but Google keeps asking for a verification code?

Google is asking you to prove it's really you by sending a code to your phone or recovery email. Check the phone number or email address you registered with your account — Google will send a code there. Type that code into the box on the screen and continue. This extra step happens when Google detects something unusual, like a sign-in from a new location.

Can I change my password from the Gmail app on my phone?

Not directly from the Gmail app itself. You have to go through your Google Account settings, just like on a computer. Open your phone's browser, go to myaccount.google.com, and follow the same steps. Or use a computer if one is nearby — the process is identical.

How often should I change my Gmail password?

There's no magic number. Change it if you suspect a breach, if you reused it on another site, or every year or two as a precaution. Changing it too often can lead to weaker passwords or forgotten passwords, so balance security with what you can actually remember or manage.