The basic steps to change your password

The process differs slightly depending on which email service you use, but the general path is the same: log in, find the account or security settings, enter your current password, type your new password twice, and save. Most services send you a confirmation email after the change goes through. The whole process usually takes less than five minutes.

You do not need any special software or tools. You change your password directly on the email provider's website or app using the device you normally use to check email. If you cannot log in because you have forgotten your password, you will need to use the "forgot password" or "can't access your account" link instead — that is a separate process covered in the FAQ section below.

Key Takeaways

  • You change your password by logging into your email account, going to account settings or security settings, and entering a new password twice.
  • A strong password is at least 12 characters long and includes uppercase letters, lowercase letters, numbers, and symbols — avoid birthdays, names, or dictionary words.
  • Most email providers ask you to confirm the change by clicking a link in a confirmation email sent to your account.
  • If you use the same password across multiple accounts, change those passwords too, because a breach at one service puts all of them at risk.

Step-by-step for Gmail, Outlook, and Yahoo

Gmail: Go to myaccount.google.com, click "Security" in the left menu, scroll to "How you sign in to Google," and click "Password." You will be asked to sign in again. Enter your current password, then type your new password in both fields and click "Change password." Google sends a confirmation email to your recovery email address.

Outlook: Go to account.microsoft.com, click "Security" at the top, then "Change your password." Enter your current password and your new password twice, then click "Next." Microsoft may ask you to verify your identity by sending a code to your phone or recovery email before the change takes effect.

Yahoo: Go to login.yahoo.com, sign in, click your account icon in the top right, select "Account info," click "Security" on the left, then "Change your password." Enter your current password and your new password twice, then click "Continue." Yahoo sends a confirmation to your account.

If you use a different email provider — AOL, ProtonMail, iCloud, or a work email — the steps are similar but the menu names may differ. Look for "Settings," "Account," "Security," or "Privacy" in your account menu. Most providers have a help article you can find by searching "[your email provider] change password."

What makes a strong password

A strong password is at least 12 characters long and uses a mix of uppercase letters, lowercase letters, numbers, and symbols. Examples: BlueMoon#2847, Tr0pic@lSunset, or Jazz$Piano99. Avoid using your name, birthdate, pet's name, or common words — these are easy to guess or crack with automated tools.

Do not reuse passwords across different accounts. If one service gets hacked and your password is exposed, attackers will try that same password on your email, banking, and social media accounts. If you have used the same password in multiple places, change all of them. A password manager like Bitwarden, 1Password, or KeePass can store unique passwords for each account so you only have to remember one master password.

Change your email password every 6 to 12 months, or immediately if you suspect someone else has accessed your account. If you notice unfamiliar activity — emails you did not send, password reset attempts, or recovery email changes — change your password right away and check your account recovery options to make sure they still belong to you.

Updating passwords on devices and apps

After you change your email password, your phone, tablet, and any apps that use that email account will stop working until you update them with the new password. You will usually see an error message asking you to re-enter your password. Go into the email settings on each device and type your new password.

On an iPhone or iPad, go to Settings, scroll to Mail, tap Accounts, select your email account, tap Account, and update the password field. On Android, open Gmail or your email app, tap your profile picture, select "Manage your Google Account" (or equivalent for other providers), go to Security, and update the password. On a computer, open your email app (Outlook, Thunderbird, Apple Mail), go to account settings, find the password field, and enter your new password.

Some apps like Slack, Discord, or banking apps that are linked to your email may also ask you to sign in again. This is normal and a security feature — it prevents someone who has stolen your password from staying logged in on devices they do not own.

If you cannot access your account

If you have forgotten your password or cannot log in, you cannot use the steps above. Instead, go to your email provider's login page and look for a link that says "Can't access your account," "Forgot password," or "Need help signing in." Click it and follow the prompts. You will be asked to verify your identity using a recovery email address, a phone number, or security questions you set up earlier.

Recovery can take anywhere from a few minutes to a few hours depending on how quickly you respond to verification requests. If you no longer have access to your recovery email or phone number, contact your email provider's support team — they may ask you additional questions to confirm you own the account before they help you regain access.

Frequently Asked Questions

Do I have to change my password if I have not been hacked?

No, but security experts recommend changing it every 6 to 12 months as a precaution. If you use a strong, unique password and have not seen signs of unauthorized access, changing it less often is acceptable. Change it immediately if you notice suspicious activity, use the same password on multiple accounts, or have shared your password with someone.

What if I change my password and then forget the new one?

Use the "forgot password" link on your email provider's login page. You will need to verify your identity using your recovery email or phone number. This process is separate from changing your password and takes longer because the provider needs to confirm you own the account.

Will changing my password sign me out of other devices?

Not automatically, but most email providers give you the option to sign out of all other sessions when you change your password. Gmail, Outlook, and Yahoo all have a "Sign out of all other sessions" button on the password change page. Use it if you think someone else has access to your account or if you have logged in on a device you no longer use.

Can I change my password from my phone?

Yes. Open your email app or go to your provider's website in a browser, log in, and follow the same steps you would on a computer. The menus may look slightly different on a phone screen, but the process is identical. After you change it, you will need to update the password in your email app settings so it can stay connected.

What should I do if I see a password change I did not make?

Someone else may have access to your account. Change your password immediately using a device you trust. Then check your recovery email and phone number to make sure they have not been changed. Review your account activity and recent sign-ins to see where the unauthorized access came from. If you see suspicious activity, consider enabling two-factor authentication for extra security.