Changing Your Password
Set a new password from Account Settings → Security, what the form asks for, what happens to your other sessions, and how an account that signs in with a passkey alone sets one.
By the end of this page you will have set a new password and know what the change does and does not touch.
Your password is one of the ways you sign in; the others are a passkey and, behind either, a second factor. The form to change it sits at the top of Account Settings → Security, above the browser sessions, the two-factor card and the passkeys.
Before you begin
| You need | Why |
|---|---|
| Your current password, or a passkey | The form asks for one of them before it writes the new password, so a left-open session cannot change it. |
| A new password of at least eight characters | Shorter ones are refused; a password manager's generated string is the best choice. |
Change your password
- Open Account Settings → Security.
- Under Update password, type your Current password. An account that holds no password confirms with a passkey instead, and the field is not shown.
- Type the New password and the same again under Confirm password.
- Press Save.
A toast confirms the change, and the activity log records that your password was updated, never the value. Your other browser sessions stay signed in; sign them out from the sessions card beneath the form if the reason for the change was a device you no longer trust (Browser sessions).
Signing in with a passkey alone
An account created by accepting an invitation with a passkey has no password. Such an account can set one here, confirming with the passkey, or keep signing in with the passkey and never set one. If you hold neither, use Forgot your password? on the sign-in page; the emailed link lets you set one (Signing in).
All the fields
What happens next
- The new password works from your next sign-in. Nothing is emailed; a sign-in from a new device is still announced the way your notification destinations say.
- Your passkeys, your second factor and your recovery codes are untouched.
- Your other browser sessions are untouched. Sign them out yourself from the card below the form.
Permissions
| Action | Permission |
|---|---|
| Change your password | Being signed in; no role is needed. |
Frequently asked
Related
- Signing in — the password reset flow
- Passkeys — signing in without a password
- Two-factor authentication — the second step behind either
- Browser sessions — signing other devices out
How is this guide?
Last updated on
Signing In
Sign in with your email and password or with a passkey, answer the two-factor challenge, stay signed in, and recover when a password or link no longer works.
Two-Factor Authentication
Add a six-digit code from an authenticator app to your password sign-in, save your recovery codes, and recover when you lose the device.