Where Microsoft stores your password and why you can't just look it up

Microsoft does not store your password anywhere you can see it — not in your email, not in a settings menu, not in a file on your computer. This is intentional. If Microsoft kept your password written down, hackers who broke into Microsoft's systems could read it and get into your account. Instead, Microsoft stores only a scrambled version called a hash, which is mathematically impossible to turn back into your real password.

This means if you forget your password, you cannot retrieve it. You can only reset it — which means creating a new one. The reset process is different depending on whether you still have access to the email address or phone number attached to your account.

Key Takeaways

  • Microsoft passwords cannot be retrieved because Microsoft does not store the actual password, only a scrambled version of it.
  • If you remember your password, you can change it to something new by going to account.microsoft.com and signing in normally.
  • If you forgot your password, you reset it by visiting the Microsoft account recovery page and proving you own the account using a backup email or phone number.
  • If you cannot access your backup email or phone, Microsoft can verify your identity through security questions or by asking you to wait a few days.
  • A password manager like Bitwarden or 1Password can store passwords securely so you do not have to remember them.

Resetting your password if you still remember it

If you know your current password and want to change it, go to account.microsoft.com in your web browser. Click "Sign in" and enter your email address and current password. Once you are signed in, look for "Security" or "Password" in the left menu, then select "Change password."

Microsoft will ask you to type your current password one more time, then type your new password twice. Your new password should be at least 8 characters long and include uppercase letters, lowercase letters, numbers, and symbols — for example, BlueSky#2024Home. Once you confirm the change, you are done. The new password takes effect when ready on all your devices.

Resetting your password if you forgot it

Go to account.microsoft.com/passwordreset in your web browser. You will see a page that says "Recover your account." Enter the email address or phone number associated with your Microsoft account, then click "Next."

Microsoft will ask you to prove you own the account. The easiest way is to check a backup email address or phone number you set up earlier. If you added a backup email, Microsoft will send a code to that email. Check your inbox (and spam folder), copy the code, and paste it into the reset page. If you added a phone number, Microsoft can text or call you with a code instead.

Once you enter the correct code, Microsoft will let you create a new password. Type it twice to confirm, and you are done.

What to do if you cannot access your backup email or phone

If you do not have access to the backup email or phone number you set up, Microsoft offers other ways to verify your identity. On the password reset page, look for a link that says "I can't use my backup email or phone number" or "I do not have access to these." Click it.

Microsoft may ask you security questions you answered when you created your account — for example, "What is the name of your first pet?" or "What city were you born in?" If you remember the answers, type them in. If you do not, Microsoft will ask you to wait 24 to 30 days. During that time, your account remains locked. After the waiting period, you can create a new password without answering questions.

The waiting period exists to protect you: if a hacker is trying to break into your account, they cannot do it just by guessing security questions. They have to wait the full time.

Changing your password on your phone or tablet

If you use Microsoft services on your phone — such as Outlook email or OneDrive — you may need to update your password there too. On an iPhone or Android phone, open the Settings app, find "Accounts" or "Mail," and look for your Microsoft account. Tap it, then look for "Password" or "Change password." Enter your new password.

If you use the Outlook app on your phone, open the app, tap the menu (three horizontal lines), go to "Settings," find your account, and update the password there. You may need to sign out and sign back in for the change to take effect.

Using a password manager so you do not have to remember passwords

The easiest way to avoid forgetting passwords is to use a password manager — a program that remembers passwords for you and fills them in automatically. Popular free or low-cost options include Bitwarden, 1Password, and Dashlane. You create one strong master password to unlock the manager, and it stores all your other passwords encrypted.

When you visit a website and sign in, the password manager offers to save your password. The next time you visit, it fills in your email and password automatically. This means you only have to remember one password instead of dozens. If you forget your Microsoft password in the future, you can open your password manager and see it there.

Password managers work on computers, phones, and tablets, and they sync across your devices so your passwords are available everywhere you sign in.

Why Microsoft asks for a backup email or phone number

A backup email or phone number is your safety net. If you forget your password, it is the fastest way to prove you own the account without waiting 24 to 30 days. If someone else tries to break into your account, Microsoft can send a code to your backup email or phone to make sure it is really you.

You can add or change your backup email or phone by signing into account.microsoft.com, going to "Security," and looking for "Additional security info" or "Backup contact methods." Add at least one backup email address and one phone number if you can. Use an email address you check regularly and a phone number you have had for a while.

Frequently Asked Questions

Can Microsoft tell me what my password is?

No. Microsoft does not know your password — they only know a scrambled version of it. Even Microsoft employees cannot see your actual password. If you forget it, your only option is to reset it and create a new one.

What if I think someone else knows my password?

Change it when ready by going to account.microsoft.com and signing in. If you cannot sign in because someone changed your password, use the password reset page at account.microsoft.com/passwordreset. After you reset it, turn on two-factor authentication in your Security settings so that anyone trying to sign in needs a code from your phone or email, even if they know your password.

How often should I change my Microsoft password?

You do not need to change it on a schedule. Change it if you think someone knows it, if you used the same password on another website that got hacked, or if you have not changed it in several years. A strong password that you use only for Microsoft is safer than changing a weak password every month.

Is it safe to write my password down?

Writing it down on paper and storing it in a locked drawer at home is safer than using the same password everywhere or writing it on a sticky note at your desk. A password manager is even safer because it encrypts your passwords. Never email your password to yourself or store it in an unencrypted document.

What if I reset my password but still cannot sign in?

Wait a few minutes — sometimes the change takes time to spread across Microsoft's servers. If you still cannot sign in after 15 minutes, try resetting your password again. If that does not work, visit the Microsoft support page or contact Microsoft support directly through account.microsoft.com.