Start here: what you're changing and where

The steps to change a password depend on what you're changing it for — your email account, a social media site, your phone, your computer, or a specific app all work differently. The good news is that most services follow the same basic pattern: find the settings or account menu, look for "Password" or "Security", and follow the prompts to enter your old password and create a new one.

Before you start, know that you'll need to remember your current password, or have a recovery email or phone number on file. If you've forgotten your password entirely, you'll need to use the "Forgot Password" option instead, which is a different process. This guide covers changing a password you still remember.

Key Takeaways

  • Most password changes happen in Settings or Account menu, under a section called Password, Security, or Account Security.
  • You'll need your current password to change it, so if you've forgotten it, use "Forgot Password" instead.
  • A strong new password should be at least 12 characters long and mix uppercase letters, lowercase letters, numbers, and symbols.
  • After you change your password, you may be signed out of all devices and need to sign back in with the new password.
  • If you use the same password on multiple sites, change it on all of them, not just one.

Changing your password on Windows or Mac

On Windows 10 or 11, go to Settings (the gear icon), then select "Accounts" on the left side. Click "Password" and then "Change". Windows will ask for your current password first, then let you type a new one twice to make sure you didn't make a typo. You can also add a password hint that only you will see.

On Mac, open System Settings (the gear icon), then click "General" in the sidebar. Select "Login Items & Extensions" or "Users & Groups" depending on your macOS version. You may need to click the lock icon and enter your current password to make changes. Then find the option to change your password and follow the same pattern: current password, then new password twice.

After you change your password on either system, you'll be signed out of your user account and need to sign back in with the new password the next time you restart or lock your screen.

Changing your password on iPhone or Android

On iPhone, open Settings and tap your name at the top. Select "Password & Security", then "Change Password". You'll need to enter your current Apple ID password, then create a new one. Make sure you're at least 8 characters, and Apple will tell you if your password is too weak.

On Android, the process depends on whether you're changing your Google account password or your phone's PIN or pattern lock. For your Google account, open Settings, tap "Google", then "Manage your Google Account". Go to the "Security" tab and select "Password". You'll need to sign in again, then enter your new password twice. For your phone's lock screen, go to Settings, find "Security" or "Biometrics and Security", and look for "Screen Lock Type" or "Lock Screen".

Changing your password on Gmail, Outlook, or Yahoo

For Gmail, sign in to your account, then click your profile picture in the top right corner. Select "Manage your Google Account" and go to the "Security" tab. Scroll down to "How you sign in to Google" and click "Password". You'll sign in again, then enter your new password twice.

For Outlook, sign in at outlook.com, then click your profile picture in the top right. Select "View account" or "Account settings", then find "Security" or "Password". Click "Change password" and enter your current password, then your new one twice.

For Yahoo Mail, sign in, click your account icon in the top right, and select "Account info". Go to "Security" and find "Password". Click "Change password", enter your current password, then your new one twice. Yahoo may ask you to verify your identity with a code sent to your phone or recovery email before letting you proceed.

Changing your password on Facebook, Instagram, or Twitter

On Facebook, click the down arrow in the top right corner and select "Settings & Privacy", then "Settings". On the left side, click "Password". Enter your current password, then your new password twice. Facebook will sign you out of all other devices after you change it.

On Instagram, open the app and tap your profile icon in the bottom right. Tap the menu icon (three horizontal lines) and select "Settings and Privacy", then "Password and Security". Tap "Password" and enter your current password, then your new one twice.

On Twitter (now X), click the three dots in the top left, select "Settings and Privacy", then "Settings". Go to "Security and account access" and click "Password". Enter your current password, then your new one twice. Twitter may ask you to verify your identity before allowing the change.

Creating a password that's actually strong

A strong password is at least 12 characters long and uses a mix of uppercase letters, lowercase letters, numbers, and symbols. Avoid using words from the dictionary, your name, your birthday, or anything someone could guess if they know you. Don't use the same password on multiple sites — if one site gets hacked, someone could use that password to break into your other accounts.

A good approach is to use a passphrase: four random words strung together, like "BluePencilMountainThursday". This is easier to remember than a random string of characters and just as hard to crack. If you have trouble remembering multiple passwords, consider using a password manager like Bitwarden, 1Password, or the password manager built into your browser — these tools store your passwords securely and fill them in automatically.

What to do if you're locked out after changing your password

If you changed your password and now can't sign in, the most common reason is a typo. Try again slowly, paying attention to uppercase and lowercase letters. If you're still stuck, use the "Forgot Password" option to reset it. You'll need access to your recovery email or phone number to do this.

If you changed your password on your phone or computer and now can't sign in to other devices, that's normal — you need to use the new password on those devices too. Sign out completely, then sign back in with your new password. If you're locked out of your email account itself and can't use "Forgot Password", you may need to contact the email provider's support team with proof of identity.

Frequently Asked Questions

Do I need to change my password regularly?

Most security experts now say no — changing your password every 90 days doesn't actually make you safer. Instead, focus on using a strong, unique password and changing it only if you think it's been compromised or if a website you use has been hacked.

What if I can't remember my current password to change it?

Use the "Forgot Password" option on the login screen instead. You'll need access to your recovery email or phone number. The site will send you a link or code to reset your password without needing the old one.

Will changing my password sign me out everywhere?

It depends on the service. Gmail, Facebook, and Twitter will sign you out of all devices and require you to sign back in with your new password. Other services may keep you signed in on your current device but require the new password on other devices.

Can I use the same password on multiple websites?

No. If one website is hacked and your password is stolen, someone could use that same password to break into your email, bank account, or other important sites. Use a unique password for each account, especially for email and financial sites.

What should I do if I think my password has been hacked?

Change it immediately, then check if that website has been part of a known data breach by visiting haveibeenpwned.com. If it has, change your password on any other sites where you used the same one. Consider enabling two-factor authentication for extra security.