Change your Gmail password from your account settings

Open Gmail and click your profile picture in the top right corner, then select "Manage your Google Account." Go to the "Security" tab on the left. Scroll down to "How you sign in to Google" and click "Password." Google will ask you to sign in again — enter your current password. Then type your new password twice to confirm it, and click "Change Password."

The new password takes effect immediately. You'll stay signed in on the device you're using, but you may need to sign in again on other devices — phones, tablets, computers — the next time you open Gmail or another Google service on them.

Key Takeaways

  • You change your Gmail password through your Google Account settings, not through the Gmail app itself.
  • Google requires you to enter your current password before you can set a new one, as a security check.
  • After you change your password, you'll need to sign in again on any other devices you use, usually the next time you open Gmail.
  • A strong password is at least 12 characters long and mixes uppercase and lowercase letters, numbers, and symbols.
  • If you can't remember your current password, use the "Forgot password?" option on the Gmail sign-in screen instead of trying to change it.

Why you should change your password regularly

Changing your password periodically reduces the window of time a stolen or guessed password can be used to access your account. You don't need to change it every month — security research shows that frequent changes often lead people to use weaker passwords or reuse old ones. A better approach is to change it once a year, or right away if you suspect someone else knows it.

Change your password immediately if you've reused it on other websites and one of those sites had a data breach. Attackers often test stolen passwords across many services, so a password that was safe on Gmail might be compromised if it was also used on a site that was hacked.

Create a password that's actually hard to guess

A strong password is at least 12 characters long and includes uppercase letters, lowercase letters, numbers, and symbols. "MyDog!Runs42" is stronger than "password123" because it mixes character types and doesn't rely on common words or patterns.

Avoid passwords based on information someone could find about you — your birthday, your child's name, your street address, or your username. Don't use sequences like "123456" or "abcdef." A password manager like Bitwarden, 1Password, or the password manager built into your phone can generate and store strong passwords for you, so you only have to remember one master password.

What happens if you forget your new password

If you change your password and then forget it, click "Forgot password?" on the Gmail sign-in screen. Google will ask you to enter the last password you remember, or to verify your identity using a recovery email address or phone number you've set up on your account.

This is why it's important to keep your recovery email and phone number current. If someone gains access to your Gmail account, they can use those same recovery methods to lock you out. Check your recovery options by going to "Security" in your Google Account settings and scrolling to "How you can recover your account."

Signing back in on your other devices

After you change your password, you'll usually stay signed in on the device where you made the change. On other devices — your phone, tablet, or a different computer — you may see a notification that you've been signed out, or Gmail may ask you to sign in the next time you open it.

When prompted, enter your email address and your new password. If you have two-step verification turned on (which adds an extra security layer), you'll also need to enter a code from your authenticator app or receive one by text or email. This extra step is why two-step verification is worth setting up — it means someone who steals your password still can't access your account without that second code.

If you think someone else knows your password

Change your password immediately, then review your account activity. In Gmail, click your profile picture, go to "Manage your Google Account," then select the "Security" tab. Scroll down to "Your devices" and click "Manage all devices." You'll see a list of devices currently signed into your Google Account. If you see a device you don't recognize, click it and select "Sign out."

Also check "Recent security events" in the Security tab to see if anyone has tried to sign in from an unusual location. If you see suspicious activity, consider turning on two-step verification if you haven't already. This makes it much harder for someone to access your account even if they have your password.

Two-step verification adds a second layer of security

Two-step verification means Google asks for a second form of proof when you sign in — usually a code from an authenticator app on your phone, or a code sent by text message. Even if someone has your password, they can't sign in without that code.

To turn it on, go to your Google Account Security tab and click "2-Step Verification." Google will walk you through the setup. You'll choose whether to receive codes by text, through an authenticator app like Google Authenticator or Authy, or both. An authenticator app is more secure than text messages because attackers can sometimes intercept texts, but text is better than nothing if you can't use an app.

Frequently Asked Questions

Do I need to change my password if I change my recovery email or phone number?

No. Changing your recovery email or phone number doesn't require a password change. However, if you're changing these because you think someone else has access to them, change your Gmail password first, then update your recovery information.

What if I'm locked out of the account recovery process?

If you can't verify your identity using your recovery email or phone number, Google offers other ways to prove the account is yours — you may be asked questions about your account history or to provide a government ID. Go to the account recovery page and follow the prompts. The process can take several days.

Can I use the same password for Gmail and other accounts?

No. If you reuse a password and one of those other sites is hacked, attackers will try that password on Gmail and other services. Use a different password for each important account. A password manager makes this practical — it remembers all your different passwords so you don't have to.

Does changing my password sign me out of Gmail on all my devices?

Not immediately. You stay signed in on the device where you changed the password. On other devices, you'll usually be asked to sign in again the next time you open Gmail or use another Google service, or you may see a notification prompting you to re-enter your password.