The basic steps work the same way across most services
To change your password, you sign into your account, find the password or security settings, enter your current password, type your new password twice, and save the change. The exact location of these settings varies by service — some put it under "Account Settings," others under "Security," and a few hide it in "Privacy & Security" or a menu labeled with your profile picture. The process usually takes two to three minutes.
Most services will ask you to confirm the change by clicking a link in an email sent to your account address, or by entering a code texted to your phone. This extra step protects you if someone else has access to your account — they cannot complete the password change without also controlling your email or phone.
Key Takeaways
- You will need your current password to change it, so have that ready before you start.
- Your new password should be at least 12 characters long and include uppercase letters, numbers, and symbols to resist guessing.
- Most services send a confirmation email or text after you change your password — check for it and approve the change if prompted.
- If you cannot remember your current password, use the "Forgot Password" link instead of trying to change it from the settings menu.
Where to find the password change option on common services
On Gmail, open your account at myaccount.google.com, click "Security" in the left menu, scroll to "How you sign in to Google," and click "Password." On Facebook, click the downward arrow in the top right, select "Settings & Privacy," then "Settings," then "Security and login," and finally "Change password." On Microsoft accounts, go to account.microsoft.com, click "Security," then "Change your password."
On Apple devices, go to Settings, tap your name at the top, select "Password & Security," and tap "Change Password." On Amazon, hover over "Account & Lists" in the top right, click "Account," then "Login & security," and click "Edit" next to "Password." On Twitter/X, click the three dots in the top left, select "Settings and privacy," go to "Security and account access," then "Security," and click "Change your password."
If you cannot find the password settings on a service you use, look for a "Help" or "Support" link and search for "change password" — most services have a support article that walks you through it.
What makes a strong password you should actually use
A strong password is at least 12 characters long and mixes uppercase letters, lowercase letters, numbers, and symbols like ! @ # $ % or &. Avoid passwords based on your name, birthdate, address, or the name of the service itself — these are the first things someone trying to break in will guess. Do not use the same password across multiple services, because if one service is breached, attackers will try that password on your email, banking, and social media accounts.
If you struggle to remember different passwords, use a password manager like Bitwarden, 1Password, or Dashlane. These tools store your passwords in encrypted form and fill them in automatically when you sign in. You only have to remember one strong master password to unlock them all. Most password managers also generate random strong passwords for you when you create a new account.
What to do if you see a password change you did not make
If you notice your password was changed without your permission, or if you receive an email saying your password was changed and you did not do it, act immediately. Go to the "Forgot Password" page for that service and reset your password using your email address or phone number. Then check the account's login history or active sessions — most services show you where and when your account was signed in from.
If you see logins from places you do not recognize, sign out all other sessions and change your password again. Check your email recovery address and phone number to make sure they are still yours — attackers sometimes change these to lock you out. If you cannot regain control of the account, contact the service's support team with proof of identity (like a photo ID or a credit card statement) and explain that your account was compromised.
Changing your password on shared or public devices
If you change your password on a shared computer, public library computer, or someone else's phone, sign out completely when you are done. Do not check the box that says "Remember me" or "Keep me signed in," because it will store your login information on that device. After you leave, clear the browser history and cookies if you can, or ask the device owner to do it.
If you have already signed into an account on a shared device and cannot go back to clear it, change your password as soon as you get to a device you control. This forces the shared device to sign out automatically, because the stored password no longer works.
Why you should change your password periodically, even if nothing went wrong
Changing your password every few months limits the damage if a service you use was breached without announcing it publicly. Large data breaches sometimes go undetected for months or years — if an attacker has had your old password sitting in a stolen database, a password change cuts off their access. You do not need to change it every month, but every three to six months is reasonable for accounts that hold sensitive information like email, banking, or work accounts.
If you receive a notice that a service you use was breached, change your password for that service immediately, and also change the password for any other service where you used the same or a similar password. If your email address was in the breach, change your email password too, because attackers often target email accounts to reset passwords on other services.
Frequently Asked Questions
Do I have to use my current password to change it?
Yes, most services require you to enter your current password before you can set a new one. This prevents someone who gains temporary access to your device from changing your password and locking you out. If you do not remember your current password, use the "Forgot Password" option instead.
What if I change my password and then forget the new one?
Use the "Forgot Password" link on the sign-in page. You will receive a reset link or code at your email address or phone number. Click the link or enter the code, and you can set a new password. Keep your recovery email and phone number current so this process works when you need it.
Will changing my password sign me out on other devices?
Most services sign you out on all devices after a password change, though some let you stay signed in on devices you mark as trusted. Check your account settings to see which devices are currently signed in, and sign out of any you do not recognize before changing your password.
Can I change my password if I am locked out of my email?
No — most services use your email address to verify your identity when you reset your password. If you cannot access your email, contact the service's support team with proof of identity. They can help you regain access, but the process is slower than a standard password reset.
Should I write my password down somewhere?
No. Writing passwords on paper, sticky notes, or documents on your computer defeats the purpose of having a strong password. Use a password manager instead — it encrypts your passwords and stores them securely. If you must write something down, write a hint that only you would understand, not the actual password.