Change your Yahoo password from your account settings

Open Yahoo.com and sign in with your current username and password. In the top right corner, click your account icon (usually your initial or profile picture), then select Account info. On the left side menu, click Security, then find the Password section and click Change password.

Yahoo will ask you to enter your current password once more to confirm it's really you. Then type your new password twice — once in the "New password" field and once in the "Confirm password" field. Click Change password at the bottom. You'll see a confirmation message, and the change takes effect when ready.

If you're signed in on other devices or browsers, you may be signed out automatically. You'll need to sign back in with your new password on each device.

Key Takeaways

  • You can change your Yahoo password anytime from Account info > Security > Password, as long as you remember your current password.
  • Yahoo requires you to enter your current password before setting a new one, which protects your account if someone else gains temporary access to your computer.
  • A strong password contains at least 8 characters and mixes uppercase letters, lowercase letters, numbers, and symbols — avoid birthdays, names, or dictionary words.
  • After you change your password, you may be signed out on other devices and will need to sign back in with the new password.

What makes a password strong enough

Yahoo doesn't publish a minimum length requirement, but a password of at least 8 characters is standard across most email providers. The real strength comes from mixing character types: use both uppercase and lowercase letters, at least one number, and at least one symbol like ! @ # $ % or &.

Avoid passwords based on personal information — your name, birthday, pet's name, or address. Avoid common words or sequences like "password123" or "qwerty". A password like "BlueMoon$42&Oak" is much harder to crack than "Jennifer2024".

If you use the same password across multiple accounts, change it on all of them. If one site gets hacked, attackers will try that password everywhere else you have an account. A password manager like Bitwarden or 1Password can store different strong passwords for each site, so you only have to remember one master password.

If you've forgotten your current password

You cannot change your password from the Security page if you don't remember the current one — Yahoo requires it as a verification step. Instead, go to the Yahoo sign-in page and click Can't sign in? at the bottom. Yahoo will ask you to verify your identity using a recovery email address or phone number you set up earlier.

Once you've verified your identity, Yahoo will let you set a new password without entering the old one. This process usually takes a few minutes. If you don't have access to your recovery email or phone number, account recovery takes longer and may require additional steps.

Two-factor authentication adds a second layer

Changing your password is one protection, but two-factor authentication (also called 2FA) makes your account much harder to break into. With 2FA enabled, even if someone gets your password, they still can't sign in without a code from your phone.

To turn on 2FA, go to Account info > Security and look for Two-step verification. Yahoo will ask you to confirm your phone number and choose how you want to receive codes — usually by text message or through an authenticator app like Google Authenticator or Microsoft Authenticator. You'll enter a code from your phone each time you sign in from a new device.

The trade-off is a few extra seconds each time you sign in, but the security gain is significant. If your password is ever stolen, the thief still cannot access your account without your phone.

What to do if you think your password was compromised

If you suspect someone else knows your password — because you used it on a site that got hacked, or you typed it on a computer you don't trust — change it when ready. Go to Account info > Security > Password and follow the steps above. Use a completely different password, not a variation of the old one.

After changing your password, check your account activity. In Account info, look for a Recent activity or Connected apps section to see which devices and apps are signed in. If you see a device you don't recognize, click it and select Sign out or Remove. This forces anyone using that device to sign in again with your new password.

If you see suspicious activity — emails you didn't send, forwarding rules you didn't create, or recovery information changed without your permission — contact Yahoo Support when ready. They can help you find the account and investigate what happened.

Changing your password on a phone or tablet

The steps are the same on mobile, but the layout is slightly different. Open the Yahoo app or go to Yahoo.com in your phone's browser and sign in. Tap your profile icon at the top, then tap Account info. Scroll down to Security and tap Password, then Change password. Enter your current password, then your new password twice, and tap Change password.

On some phones, your browser may offer to save the new password. You can let it save, but make sure no one else has access to your phone. If you share a device with family members or roommates, consider not saving passwords on shared devices.

Frequently Asked Questions

How often should I change my Yahoo password?

You don't need to change it on a schedule if you use a strong, unique password and no one else knows it. Change it only if you suspect it's been compromised, if you used it on a site that got hacked, or if you shared it with someone who no longer needs access. Changing it too often can lead to weaker passwords or reusing old ones.

Can I use the same password I used before?

Yahoo may not allow you to reuse a very recent password — some email providers block the last 5 to 10 passwords you've used. Even if Yahoo allows it, don't reuse old passwords. If an old password was ever compromised, using it again puts your account at risk.

What happens if I change my password but forget the new one right away?

Use the "Can't sign in?" option on the Yahoo sign-in page and verify your identity with your recovery email or phone number. Yahoo will let you set another new password. You can do this as many times as you need.

Will changing my password sign me out of Yahoo Mail on my phone?

Usually yes. After you change your password, the Yahoo app on your phone may ask you to sign in again with the new password. This is normal and protects your account. If the app doesn't prompt you, you can manually sign out and sign back in to be sure.

Is it safe to change my password on a public WiFi network?

Yahoo uses encryption (HTTPS) for the password change page, so the password itself is protected. However, public WiFi is less find overall. If possible, use your phone's data connection or a trusted home network when changing passwords. If you must use public WiFi, make sure you're on the real Yahoo.com and not a fake login page.