The fastest way to change your Hotmail password

Go to account.microsoft.com in your web browser and sign in with your current Hotmail email and password. Click your profile picture or initials in the top right corner, then select View account. On the left side menu, click Security, then find the section labeled Password and click Change password. Enter your current password once, then type your new password twice (once to enter it, once to confirm), and click Next. Microsoft will send a confirmation code to your email or phone — enter that code and you're done.

The whole process takes about two minutes. Your new password takes effect immediately on all devices, though you may need to sign back in on phones or tablets that were already connected to your account.

Key Takeaways

  • You change your Hotmail password through your Microsoft account settings at account.microsoft.com, not through the Hotmail inbox itself.
  • Microsoft requires you to verify the change by entering a code sent to your email address or phone number on file.
  • Your new password works right away, but devices that were already signed in may ask you to enter it again before they sync.
  • If you forget your current password, you can reset it using a recovery email or phone number instead of going through the change process.

What to do if you can't sign in to your account

If you've forgotten your password and can't sign in to account.microsoft.com, go to the Microsoft sign-in page and click Can't access your account? below the password field. Microsoft will ask you to enter your email address, then offer two paths: you can either enter a code sent to your recovery email or phone number, or answer security questions you set up earlier.

Once you've verified your identity, you'll be taken to a reset screen where you create a new password. This is a reset rather than a change — you don't need to know your old password. After you set the new password, sign back into account.microsoft.com to make sure it worked.

Creating a strong password that you'll actually remember

Microsoft requires passwords to be at least 8 characters long and include uppercase letters, lowercase letters, numbers, and symbols (like ! or @). A password like BlueSky#2024 meets these rules and is easier to remember than a random string.

If you use the same password across multiple accounts, changing it in one place won't protect your other accounts. Consider using a password manager — a tool that stores passwords securely and fills them in for you — so you can use a different strong password for each service without having to memorize them. Common password managers include Bitwarden (free), 1Password, or LastPass.

Signing out of Hotmail on other devices after you change your password

When you change your password, Hotmail automatically signs you out of the web version on all devices. However, if you use Hotmail on your phone, tablet, or in an email app like Outlook or Apple Mail, those devices stay signed in until they try to sync again — which might not happen for hours or days.

To force an immediate sign-out on other devices, go back to account.microsoft.com, click Security, and look for a section called Your devices or Recent activity. You can see which devices are currently signed in and click to sign out any of them manually. This is useful if you're concerned about unauthorized access or if you're using a shared device.

Two-factor authentication: an extra layer beyond your password

Two-factor authentication (often called 2FA) requires a second proof of identity — usually a code from your phone — when you sign in from a new device or location. This means that even if someone learns your password, they can't access your account without also having your phone.

To turn on two-factor authentication, go to account.microsoft.com, click Security, and look for Advanced security options or Two-step verification. Microsoft will ask you to confirm your phone number or set up an authenticator app (like Microsoft Authenticator, Google Authenticator, or Authy). Once it's on, you'll get a code on your phone each time you sign in from an unfamiliar device — it adds about 30 seconds to the sign-in process but makes your account much harder to break into.

What happens if you think someone else knows your password

Change your password immediately using the steps above. Then go to account.microsoft.com, click Security, and review Recent activity to see if anyone has signed in from an unfamiliar location or device. If you see suspicious activity, click on that sign-in and select This wasn't me — Microsoft will lock that session and ask you to change your password again.

After that, turn on two-factor authentication so the same thing can't happen again. If you see that someone has changed your recovery email or phone number, contact Microsoft support directly through account.microsoft.com because that's a sign of a more serious breach.

Frequently Asked Questions

Do I need to change my password on my phone or tablet separately?

No. When you change your password at account.microsoft.com, it changes for your entire Microsoft account. Your phone or tablet will ask you to sign in again the next time it tries to sync — just enter your new password and you're set. You don't need to go into settings on each device.

What if I change my password but still can't sign in?

Wait a few minutes — sometimes it takes a moment for the change to spread across Microsoft's servers. Then try signing out completely (close the browser or app) and sign back in with your new password. If that doesn't work, use the "Can't access your account?" option to reset your password again, which often clears up sign-in problems.

Can I change my password on the Hotmail app instead of the website?

The Hotmail app doesn't have a password-change option built in. You have to go to account.microsoft.com in a web browser. However, once you've changed it on the website, the app will ask for your new password the next time it syncs.

How often should I change my Hotmail password?

Microsoft doesn't force you to change your password on a schedule. Change it if you think someone else might know it, if you've used the same password on multiple sites and one of those sites was breached, or if you haven't changed it in several years. Two-factor authentication is more effective at preventing break-ins than frequent password changes.