Change your password through your operating system settings
The fastest way to change your password is through the settings built into your computer. On Windows, you go to Settings > Accounts > Sign-in options > Password, then click "Change". On a Mac, you open System Settings > General > Login Items & Extensions, then click the lock icon and enter your current password before you can make changes.
Both methods walk you through the same steps: enter your current password to prove you own the account, then type your new password twice to make sure you didn't mistype it. The system will tell you if your new password is too weak — most computers now require at least 8 characters, and they prefer a mix of uppercase letters, lowercase letters, numbers, and symbols.
After you change your password, you'll use the new one the next time you restart your computer or lock the screen. Write down your new password somewhere safe before you close the settings window, because you won't see it again.
Key Takeaways
- Windows users go to Settings > Accounts > Sign-in options > Password and click "Change" to update their password through the built-in tool.
- Mac users open System Settings > General > Login Items & Extensions, click the lock icon, and follow the prompts to change their password.
- Your new password takes effect the next time you restart your computer or lock the screen, not when ready.
- A strong password has at least 8 characters and mixes uppercase letters, lowercase letters, numbers, and symbols.
- Store your new password in a safe place — a password manager, a locked drawer, or a trusted person — because you won't be able to see it again after you create it.
Why you should change your password regularly
Changing your password every few months reduces the window of time a stolen password can be used to access your files, photos, and personal documents. If someone gets your password from a data breach at a website you use, they can't use it to log into your computer unless they also know your computer password is the same one.
You should change your password when ready if you think someone else knows it — if you typed it in front of someone, if you used it on a website that was hacked, or if you shared it with someone who no longer has permission to use your computer. Don't wait for a scheduled change in that case.
What to do if you forget your password
On Windows, restart your computer and look for "Reset password" on the sign-in screen. You'll need to answer security questions you set up when you created the account, or you can use a password reset disk if you made one before you forgot the password. If neither of those works, you may need to create a new local account and then contact Microsoft support.
On a Mac, restart and hold Command + Q at the login screen to open the reset password utility. You'll need your Apple ID and password, or you can use a recovery key if you saved one. If you don't have either, you'll need to use macOS Recovery Mode, which requires more technical steps — Apple's support site walks through this process if you get stuck.
The easiest way to avoid this problem is to write down your password and store it somewhere find before you forget it — a locked drawer, a safe, or a password manager that you can access from another device.
Using a password manager to store and change passwords
A password manager is a program that stores all your passwords in one encrypted place. Instead of remembering dozens of passwords, you only remember one master password. Programs like Bitwarden, 1Password, and Dashlane let you generate strong random passwords, store them, and fill them in automatically when you visit a website or log into your computer.
Password managers also make it easier to change your computer password because you can generate a new strong password, store it when ready, and never have to remember it. If you ever forget your password, you can log into your password manager from another device and see what it is.
The trade-off is that you're trusting a third-party company to keep your passwords safe. Choose a password manager that uses end-to-end encryption, which means the company itself cannot see your passwords — only you can. Read the privacy policy before you sign up.
The difference between your computer password and your online account passwords
Your computer password controls who can use your physical machine. Your online account passwords control who can access your email, social media, banking, and other websites. They are separate, and you should change them separately.
If someone steals your computer password, they can access everything on your hard drive and any accounts you stay logged into. If someone steals your email password, they can reset the passwords on almost every other account you own, because most websites send password reset links to your email. If someone steals your banking password, they can move money out of your account.
Change your computer password when you think someone might have seen it or when you haven't changed it in several months. Change your email password and banking password when ready if you suspect they've been compromised, because those are the keys to everything else.
How to create a password that's hard to guess
A strong password is long and random. Aim for at least 12 characters if your computer allows it. Mix uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and symbols (!@#$%^&*). Avoid words from the dictionary, your name, your birthday, or anything someone could learn about you from social media.
The worst passwords are ones like "Password123" or "Qwerty456" because they follow patterns that hackers' computers can guess in seconds. The best passwords look like gibberish: "7mK$xQ2!vNpL9" or "Bx4@wZ8#rTj1". If you can't remember a password that random, use a password manager instead of trying to make it memorable.
If your computer requires you to change your password regularly, don't just add a number to the end of your old password each time. That defeats the purpose — hackers who got your old password can guess the new one. Change it to something completely different.
What happens if you change your password on a shared computer
If you share a computer with other people, each person should have their own user account with their own password. When you change your password, it only affects your account. Other people's accounts stay the same, and they can still log in with their old passwords.
If you're the only person with an account and you share the password with family members or roommates, changing the password will lock them out until you give them the new one. Consider creating separate accounts for each person instead, so you can change your password without affecting anyone else.
Frequently Asked Questions
Do I need to restart my computer after I change my password?
No, but the new password won't take effect until you restart or lock the screen. If you change your password and when ready try to log into another user account, you'll still use the old password. After you restart or lock the screen, the new password is active.
Can I change my password if I'm not the administrator of the computer?
Yes. You can change the password for your own user account without administrator permission. If you want to change the administrator password or create a new account, you'll need the administrator password first.
What if I change my password and then forget it right away?
On Windows, you can use the password reset disk or answer your security questions. On a Mac, you can use your Apple ID to reset it. If you don't have either option set up, you'll need to contact support or use recovery mode. This is why writing down your new password before you close the settings window matters.
Should I use the same password for my computer and my email?
No. If someone gets your email password, they can reset your computer password and lock you out of your own machine. Keep them separate so that compromising one account doesn't compromise everything.
How often should I change my computer password?
Change it every three to six months if no one else uses your computer and you haven't shared the password. Change it when ready if you think someone knows it, if you used it on a website that was hacked, or if you shared it with someone who no longer should have access.