Where to find the password settings on your computer
On Windows, open Settings by pressing the Windows key and typing "Settings," then select it. Go to Accounts on the left side, then Sign-in options. You'll see a section called Password with a button that says Add (if you don't have one yet) or Change (if you do). Click that button to start.
On Mac, click the Apple menu in the top-left corner and select System Settings (or System Preferences on older versions). Go to General, then Login Items & Extensions, or look for Users & Groups. Find your account name on the left, click the lock icon at the bottom to unlock it, then click Change Password.
On Linux, the steps vary by distribution, but most systems let you right-click the desktop, open a terminal, and type passwd, then follow the prompts. Some desktop environments like Ubuntu have password settings in the system menu under Settings > Users.
Key Takeaways
- A strong password is at least 12 characters long and mixes uppercase letters, lowercase letters, numbers, and symbols.
- Avoid passwords based on your name, birthdate, pet's name, or words found in a dictionary, because these are the first things attackers try.
- Windows, Mac, and Linux all store passwords in their own settings areas, and the process takes less than five minutes on any system.
- If you forget your password, you can reset it using a recovery email or phone number, but you should set that up before you need it.
What makes a password actually strong
A strong password is long and random. Aim for at least 12 characters. Include uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and symbols (!@#$%^&*). The longer and more mixed your password is, the harder it is to crack.
Weak passwords include your name, your spouse's name, your pet's name, your birthdate, your address, or any word you can find in a dictionary. Attackers use software that tries millions of common passwords and personal details in seconds. A password like "Fluffy2024!" looks random but is actually straightforward to guess if someone knows you have a dog.
A genuinely strong password looks like nonsense: "7mK#pQx9$vL2wN". You don't have to remember it — you can write it down and store the paper in a safe place, or use a password manager like Bitwarden, 1Password, or KeePass to store it encrypted on your device. The point is that no one else should be able to guess it or find it.
Step-by-step: creating your password on Windows
Open Settings and go to Accounts > Sign-in options. Under the Password section, click Add or Change. Windows will ask you to confirm your current sign-in method (you might need to enter a PIN or use Windows Hello if you have it set up).
Type your new password in the first box. Type it again in the second box to confirm you didn't make a typo. Windows shows you a strength meter — green means strong, yellow means medium, red means weak. Aim for green. Add a password hint if you want (something only you would understand, like "my first car's color and my lucky number"), then click Next.
Windows will ask you to set up a recovery email or phone number. This is important: if you forget your password, you'll need this to reset it. Enter a recovery email address you still use, or a phone number where you can receive a text. Click Next, then Finish. Your new password takes effect when ready.
Step-by-step: creating your password on Mac
Click the Apple menu and open System Settings. Find General on the left sidebar, then look for Login Items & Extensions or Users & Groups (the exact name depends on your macOS version). Click your account name on the left side.
Click the lock icon at the bottom left of the window — it will ask you to enter your current password or use Touch ID. Once unlocked, click the Change Password button. Enter your old password first, then type your new password twice (once to enter it, once to confirm). Click Change Password to save it.
Mac doesn't require a recovery email in the same way Windows does, but you should set up a recovery contact in case you forget. Go back to your account settings and look for Recovery Contact or Apple ID options. Your new password takes effect the next time you sign in.
Step-by-step: creating your password on Linux
Open a terminal (usually by right-clicking the desktop or pressing Ctrl+Alt+T). Type passwd and press Enter. Linux will ask you to enter your current password first, then prompt you to enter your new password.
Type your new password and press Enter. Linux will ask you to type it again to confirm. If the passwords match and meet the system's strength requirements, Linux will confirm the change. If the password is too weak (too short or too straightforward), Linux will reject it and ask you to try again.
Some Linux desktop environments like Ubuntu also have graphical password settings. Open Settings, go to Users, click your account, unlock the panel with your current password, and click Password to change it. Both methods work equally well.
What to do if you forget your password
On Windows, the recovery email or phone number you set up is your lifeline. At the sign-in screen, click I forgot my password. Windows will send a reset link to your recovery email or a code to your recovery phone number. Follow the link or enter the code, then create a new password.
On Mac, restart your computer and hold Command+Q at the login screen to open the reset assistant. You can reset your password using your Apple ID, a recovery key, or a recovery contact you set up earlier. If none of those work, you may need to use macOS Recovery (Command+R at startup) to reset your account.
On Linux, you typically need physical access to the computer and the ability to boot into single-user mode or recovery mode, which varies by distribution. If you're locked out, contact your system administrator or the Linux community for your specific version. This is why writing down your password or using a password manager is so important — recovery is much harder on Linux than on other systems.
Using a password manager instead of remembering it
You don't have to memorize your computer password. A password manager is a program that stores all your passwords in an encrypted vault that only you can open with one master password. Popular options include Bitwarden (free and open-source), 1Password (paid), LastPass (free and paid versions), and KeePass (free and open-source).
Password managers let you generate random, strong passwords automatically and fill them in when you need them. They work across devices — if you set one up on your phone, tablet, and computer, your passwords sync between them. The trade-off is that you must remember your master password, because if you lose it, you lose access to everything.
For your computer's login password specifically, you still need to type it when you first turn on the computer, before the password manager can open. But for everything else — email, banking, social media — a password manager saves you from having to remember dozens of complex passwords.
Frequently Asked Questions
Can I use the same password for everything?
No. If one website or service gets hacked and your password is stolen, attackers will try that same password on your email, bank, and computer. Use a different strong password for each important account. A password manager makes this practical because you don't have to remember them all.
How often should I change my password?
For your computer login, you don't need to change it regularly unless you suspect someone knows it or your computer was compromised. Changing it every 90 days is outdated information. Change it if you think it's been exposed, or if you shared it with someone who no longer needs access.
What if I share my computer with other people?
Create a separate user account for each person. On Windows, go to Settings > Accounts > Other people and click Add account. On Mac, go to System Settings > General > Users & Groups and click the plus button. Each account has its own password and files.
Is a passphrase better than a random password?
A passphrase — like "BlueSky$Sunset7Coffee" — can be just as strong as a random password if it's long enough (at least 16 characters) and doesn't use predictable words. Passphrases are easier to remember, but random passwords generated by a password manager are harder to crack. Either works if it's long and complex.
Can I use a fingerprint or face recognition instead of a password?
Windows Hello (face or fingerprint), Mac Touch ID, and Linux fingerprint readers are convenient, but they work alongside your password, not instead of it. You still need a password as a backup. If your biometric doesn't work or your device is stolen, you'll need the password to regain access.