How to Change the Password on Outlook (And What You Actually Need to Know First)

Changing your password on Outlook sounds straightforward — but it trips up more people than it should, because Outlook doesn't store your password the way most apps do. Understanding the distinction between Outlook the app and the account behind it is the key to getting this right.

Outlook Is an Email Client, Not a Password Vault

Here's the thing most guides skip: Outlook itself doesn't have a password. What you're actually changing is the password for the email account connected to Outlook — whether that's a Microsoft account, a Gmail account, a work Exchange account, or something else entirely.

Outlook is a front-end client. It reads your email from a server. When you change the password on that underlying account, Outlook will prompt you to re-enter your new credentials the next time it tries to sync.

This matters because where you go to change the password depends entirely on what kind of account you have.

The Two Most Common Scenarios

1. Microsoft Account (Outlook.com, Hotmail, Live, or Microsoft 365)

If you're using an @outlook.com, @hotmail.com, or @live.com address — or a work Microsoft 365 account — your password lives with Microsoft, not inside the Outlook app.

To change it:

1. Go to account.microsoft.com in any browser
2. Sign in and navigate to Security → Password security
3. Follow the prompts to verify your identity and set a new password
4. Once changed, open Outlook — it will ask you to sign in again with the new password

On Outlook for Windows, you may also see a credential prompt appear automatically after your next sync attempt. On Outlook for Mac or mobile, you'll typically be prompted to re-authenticate within the app itself.

🔐 If you've forgotten your current password, Microsoft's account recovery flow handles this — you'll verify via a backup email address, phone number, or authenticator app before being allowed to set a new one.

2. Third-Party Email Account (Gmail, Yahoo, Work/ISP Email)

If Outlook is connected to a Gmail, Yahoo, or corporate email account, you change the password directly with that provider — not through Microsoft at all.

• Gmail: myaccount.google.com → Security → Password
• Yahoo: login.yahoo.com → Security settings
• Work/corporate accounts: Usually handled through your IT department or a company self-service portal

After changing the password with the provider, you'll return to Outlook and update the stored credentials when prompted. On older versions of Outlook for Windows, you may need to go into File → Account Settings → Account Settings, select the account, and click Change to manually enter the new password.

Where It Gets More Complicated

Exchange and Work Accounts Managed by IT 🏢

If your Outlook is connected to a corporate Exchange server or Microsoft 365 tenant managed by an employer, your IT department controls password policy. You may be required to change your password through a company portal, Windows login screen, or a specific internal tool — not through Microsoft's consumer account settings.

Some organizations use single sign-on (SSO), meaning the same password unlocks Windows, Outlook, Teams, and other internal tools simultaneously. Changing it in one place changes it everywhere — which also means the wrong move in the wrong place can lock you out of multiple systems at once.

App Passwords and Two-Factor Authentication

If your account has two-factor authentication (2FA) enabled, some older versions of Outlook or certain email clients may not support modern authentication protocols. In these cases, the account provider (Google, Microsoft, Yahoo) may require you to generate an app-specific password — a separate, one-time credential used only for that email client.

This is common when connecting Gmail to Outlook via IMAP/SMTP rather than OAuth. After enabling 2FA on your Google account, Google may block basic authentication and require an app password generated from your Google account security settings.

Outlook Mobile vs. Desktop Behavior

What Determines Your Exact Steps

The specific path you take depends on several intersecting factors:

• Account type — Microsoft, Google, Yahoo, Exchange, IMAP/POP3
• Whether 2FA is enabled — affects whether app passwords are needed
• Outlook version — older desktop versions handle authentication differently than newer ones using OAuth
• Whether the account is personal or managed by an organization — personal accounts give you full control; managed accounts may restrict what you can change
• Operating system — Windows, macOS, iOS, and Android each surface credential prompts differently

Most straightforward personal setups — an Outlook.com account used on a personal device — follow a simple path: change the password at Microsoft's account portal, re-authenticate in the app. But the moment a work account, legacy email protocol, or shared device enters the picture, the variables multiply quickly.

The right answer for your situation depends on which of these pieces applies to you.